It's easier to monetize that way. They manage the convenience, your team pays them money. Once your team is using it, you're soft-locked in to continue using it.

Yes, agreed on the security perspective. It's not a secure tool. For that you should consider a desktop client (eg Fiddler) rather than a browser based client