any requirement to log in is done with malicious intent. what other purpose could it hold other than to harvest your data for their own undisclosed purposes?

any requirement to log in is done with malicious intent. what other purpose could it hold other than to harvest your data for their own undisclosed purposes? Maybe anti-bots or something, but there are other ways to do that. Besides, a bot might just make an account.