You need to understand that this workflow was designed by overpaid people with bullshit jobs having meetings for the sake of having meetings, there was never any concern about actual user experience nor security.