The rationale is avoiding installing osc altogether on the target system. It can do way too many dangerous things with the credentials it has.
