Perhaps so it can push responsibility for actions on the user, not Claude or Anthropic; and then their privacy/trust team realised this was not a good idea.