The difference with cagedbird DMs is that client provider is not able to see content of your DMs. From this perspective a layer of security makes sense.

It does add a bit of friction. I wonder if there will be pushback to make this optional.