I meant that in the sense that a typical SaaS company has no reason to be formally thinking about risk adjusted returns and therefore has no need of a CRO. If anyone cares product can do a guesstimate or something. Most companies shouldn't have a CRO.
If you’re a B2B SaaS with no CRO, good luck with vendor assessments. B2C you can skip it before reaching a critical mass where regulatory pressures will mandate it.