Why initiate connection on User Action and Never on page load?

[zach-is-my-name]

I'm sorry if this might not qualify as a "Bug", but the documentation does not make this clear, nor could I find any resources pointing to an explanation of why MetaMask strenuously advises only "Connecting" on "User Action such as a button click", and never on page load? I assume this has to do with security, however I fail to see why this is critical IF the user is prompted to confirm their connection anyway, and arguably the "user action / intent" is opening your Dapp in the first place... Please help me understand the reasoning here, because the Documentation does not