Because I experienced that the content on the page was displayed before the user was verified as logged in or verified to actually have access to the page. I redirect users without the proper access to the login page or a 404 page.