If I understand it right they bundle a publicly trusted shared cert and want to allow their users to get running on vanilla devices without having to provide a domain.