some have the configuration memory on-die as well to keep part count down. Also good to help protect your bitstream, but this isn't infallible of course.