I think most people in middle management, especially HR, are looking for "plausible deniability". They want their actions to appear defensive enough to keep their job. So don't hire self-taught, always demand a degree. Follow "industry standard" hiring practices. etc.

They don't understand tech and they don't need to. If something goes wrong they need to be able to demonstrate it's not their fault.