A government agency buys your product on a one year contract with two optional extensions. Their rules say it must run inside their own network, so your team installs it there. Some of their systems have no route to the outside at all.
In year three, the agency re-tenders the contract. A larger integrator wins and proposes to keep your product running while they build their own. Or the budget is cut and the contract is not renewed, but the software is already installed, doing useful work, and nobody is asked to turn it off.
You have no way to see it running, no way to stop it, and a copy of your code on servers you will never visit.

