So that any sensitive data stupidly uploaded doesn't get leaked, which includes "zero-retention" corporate stuff. Anything that could get sniffed by employees and other agents. It really should be standard practice for any data passing between nodes, even if it's all within a site.