It’s probably a logistical issue, not a basement security issue. It sounds like they’re implementing something like an OAuth API for integrations that operate outside your house, and you use the account for managing or deauthorizing those integrations.