Why Secure Hub being an MDM Agent needs all these permissions.

Why Secure Hub being an MDM Agent needs all these permissions...