Probably some product manager pushed back on security considerations raised by engineers.