Because of that need WSUS exists. But they relaxed rules for security fixes only - they want you to download feature updates and optional ones only from their servers.
1. Worries that third parties could insert malware.
2. Their "Genuine validation" thingy to restrict downloads.
However, that's all speculation, although quite substantiated. Please don't shoot the messenger.