I think it's because webkit is an open source project with known bugs/vulnerabilities. Bugfixes in upstream webkit version may not be included in the console version of webkit yet, so hackers can have easier time testing for potential exploits simply by testing those known bugs.