Yes. We're giving the user the ability to protect themselves from the vendor.

Your logic only makes sense if the user is your enemy.

I am the vendor and the user is my enemy. Fortunately I get to decide his capabilities and not the other way around, so I win.