Don’t exaggerate. Or maybe your company didn’t think about which tags are really necessary.
A proper configuration that doesn’t allow nonsense, even if users paste text from Word documents, is not such a big effort.

I can’t remember which JS editor I used >10 years ago for the editorial system of a city magazine, but I remember I only allowed a few tags (authors weren’t allowed to use font and color settings) and also run a HTML cleaner before saving. It was an effort until it worked, but not that much.