The 400V system needs to be able to *completely* disconnect from the car for safety in the event of a crash, fire, flood, overload, or GFCI incident. And when that happens you're really gonna want working headlights, power steering, power brakes, airbags, wipers, windows, and door handles. Imagine if a chafed wire somewhere allowed 400V to get onto the car body, how could the system protect you from electrocution while still providing brakes and steering if it didn't have a separate 12V battery?
Also, it takes a lot of current to run all that 12V stuff simultaneously (lights, windows, radio, steering, brakes, etc.) so it'd take a pretty beefy and expensive DC-DC converter to handle it all. And that big ol' converter circuit is going to waste a lot of power when it's just sitting there all day looking for your key signal. That's also why Tesla's system recharges the 12V battery in a crude on/off cycle rather than a constant trickle.
Note that fossil cars have this same redundancy for some of the same reasons. The alternator will power the car if the battery fails and the battery will power it if the alternator/engine fails.