Attestation has become a substitute for assessment.
A policy is published, everyone clicks acknowledge, and the report shows 100%. That tells you the document was opened. It does not tell you whether anyone can perform the procedure it describes.
The risk: a competency finding on a policy you believed was covered.