It's the BIP. If you are using Sparrow Frigate server you have to give them the scan_priv to do the scanning. If you listen to a recent episode about Frigate, they are very earnest on how they plan to protect that key by keeping it in-memory only.
In the end, I credit BIP352 for introducing the concept that it's ok foe a user to share a private key.
