Second because they are using all kind of tricks to add variables into it (ENV, ...): the configuration is often dynamic by nature or by re-use.
Third because it's only strings, which is prone to mistakes: they are having a huge lot of code to check those configurations.