It's a good question and one I've pondered before. On paper it sounds great, but I'm actually not sure what would happen in practice. I'm not sure what the legal implications are of creating a token that borders on being a security. The lack of clarity on such issues may be the very reason we don't see it occurring. Note too that they need to add some level of decentralization to it (READ: Not full control) which is scary to most executives. If they don't decentralize it, what's the difference between that and a Microsoft Point? Obviously quite a few on a technical basis, but you get my point.