To add on to this: If your company is not tiny, then having properly managed accounts is literally a legal requirement in most countries and having people make random, not accounted for purchases raises questions.