Is Monzo requiring access to contacts for joint account opening / Monzo.me necessary & secure?

Why would I need to change them if someone knew who my contacts are? Still struggling to see the issue?