This is only required for the WebView which many bundle commands use to show online documentation and similar. It’s impractical to maintain a whitelist of allowed domains.