Perhaps some compliance to a too-broad security policy. Like, across the board, all NFC enabled electronics with read/write capabilities must have a password mechanism.
They probably knew it was dumb but implementing it was easier than getting around all the organizational permissions to make an exception.
They probably knew it was dumb but implementing it was easier than getting around all the organizational permissions to make an exception.