Because HD pubkeys are derived from a tree you want to give a counterparty only a branch xpub, not the root one. That way they only know about addresses pertinent to them, not the whole heirarchy. See the multiple separate "wallet chains" in the diagram from the spec: https://github.com/bitcoin/bips/blob/master/bip-0032.mediawiki#master-key-generation