it's possible they're trying to avoid a monoculture of web servers that serve tor sites in order to avoid many sites becoming insecure in the event of a bug disclosure for a software package they have no control over