Google is probably trying to get around the cardinal rule of network security: you can't trust the client.
Their RCS client probably doesn't make sending a huge volume of messages (i.e. spam) easy, and more automation is possible with root. Yes, it's stupid, but it's not completely without purpose.