Yes. We're giving the user the ability to protect themselves from the vendor.
Your logic only makes sense if the user is your enemy.
I am the vendor and the user is my enemy. Fortunately I get to decide his capabilities and not the other way around, so I win.
I am the vendor and the user is my enemy. Fortunately I get to decide his capabilities and not the other way around, so I win.