The former is simply bad security, the latter makes it easier to rely on a file structure on the guest.