There's a big difference between not getting caught versus acting legally. That's true for both the company and the GCAA.
On the topic of independent supervision: HH is a Board Member of the GCAA and Director of the Dubai CAA. That's like the CEO of Delta being the Head of the Georgia Aviation Authority and sitting on the Board of the FAA. If you read the ICAO and IASA rules around that you will find that it's not illegal but seen as a big concern.