The simplest answer is that they’re on null-sec money’s side.
If RIOT is like the tiny gourmet bistro that will custom-craft a burger for you and serve it with hand-cut fries and hand-pressed lemonade iced tea, then BLACKFLAG is the McDonald’s around the corner that never gets a health inspection because HQ has a full-time lobbyist working the city hall. They’re certainly able to crush all opposition on a whim, but their patties are always soggy.