Comment by tetrep

> such as Little Snitch (I think?)

Correct. It is likely users allow their primary browser full access to all hosts on ports 80 and 443, if not all ports.

Additionally, launching the browser gives you easy access to all the tastey session cookies and access to their keychain (I assume a lot of people give their default browser on OSX keychain access).