Having been an infrastructure provider for 30 years, this answer is largely unjustifiable.

It's a bunch of handwaving to try to get price discrimination for a "how the Internet is supposed to work" standard everyone, even a single dev client of the SaaS, should be using.

And that the SaaS provider should be pushing so they don't have the liability of subscriber credential database protection ...