it’s a simple security measure. The airdrop is usually done by some automatic scripts, so you have to use the private keys in those tools. It’s just to avoid losing everything if the server access is compromised.