Not even just companies, but also governments and entire
countries.
Since the late 1990s, South Korea has had a law that any website transmitting any sort of banking/financial data was required to use a specific ActiveX plugin for encryption. This law was in place for years after ActiveX was officially deprecated, and I believe that it has only just recently been amended to allow other crypto implementations.