Different permissions. The connection to receive shouldn’t be able to send since you’re giving it to us. The permission to spend stays on your device.