Often, what that means is, “We have some stupid “security” requirement that a third party has convinced us to write in despite us not really needing it.” Usually, it’s for something invasive that can be bypassed by people with enough patience and time on their hands (= high schoolers) if the source code can be modified.