I think I t's meant as a first line of defense in (spear-)phishing attacks. It's also off by default.