I think they justify it as an ease of use vs security trade off