I think this may be driven by usability where they want to make it as easy as they can for the user to engage.

I agree with you though, security trumps usability for this one.