Because once you have strings attached, you need to constantly be aware of it. Sure, this only targets cloud providers, but what if a company wants to host a redis instance for its subsidiaries? Or you expose direct Redis access to certain partners? Or insert any other perfect innocent scenario. Suddenly you need to hire a lawyer.