Because what Person Y is doing is no more the whole of the job than what Person X is doing, and OF can more easily detect (though its still far from perfect, I've heard) and aggressively cracks down on when the person doing Person X's job is not the person who legally owns the account.