imho: it's because something could've happend so that the /etc/passwd file can't be read, or various login parts wrong pam selection, or whatever, imho, if you want to secure this, you should secure the grub instead.