I agree with you. One thing they could have done— they might have done it, and maybe it's in the 5,000 pages that you mentioned—is ask for a letter from the other party answering the question, “Did you enter an agreement with the WE Charity that you would actually collaborate with them and deliver recruits?”
This is what would have been normal due diligence. Whenever someone is reporting to a checklist, you ask for supporting documents to validate it. That's the first part.
The second part is that sometimes with corporations we talk about the risk appetite. We do a risk assessment and consider what is an acceptable risk and what is not. In these situations, I would be very curious to see what the risk assessment of that special project was.