From ESG Reporting to Real-World Compliance: Legal Risks and Corporate Duties