Most likely an anti-exploit measure. Doesn’t prevent anything but limits one vector of spreading around an exploit, if one is found, that could possibly lead to the ability to run code on the device and then hack it and run homebrew and play Switch roms for free.