Yeah that prevents mass surveillance but doesn't prevent targeted surveillance (think steam account with valuable skins).

The stakes are “we lost all the user passwords”. This is a problem that can occur if e.g. the POP is logging too many things. Preventing passive collection at POPs also prevents all sorts of footguns like these that can lead to a breach, it is smart security sense IMO.