i think the benefit shall be something like this: instead of feeling insecure about your data and having to request information about security from the webapp provider himself, you would have a single endpoint in the hoster, which commits himself explicitly to security. plus, you could be safer to believe that no harm is done with your data.