Why have separate permissions?

When I first put booktree on my site, everything worked fine - except for the anonymous users! Then I realised that booktree has its own permissions. Is this really necessary? I can't see any particular reason for giving Booktree any permissions other than the normal, though it should be compatible with the permissions enforced per node (using the node_access system - perhaps even _node_access_join_sql?).