[cimmanom]

How big is your company and how big is your engineering team?

What are the risks if a major bug sits on production for an hour? (A few hundred annoyed customers? Hundreds of thousands in losses? Life or death?)

How automated are deploys and how easy are rollbacks?

Depending on the answers to all those questions, that level of bureaucracy might be totally within reason or it might be beyond ridiculous.