You’ve nailed it with these two points.

I’d like to add they specifically want to determine when and where you access their IP.