Requiring these credentials seems like a perfectly legitimate way to protect this information. Later in the article it mentions other reasons that were more likely to have contributed to the decision that they made.