What's the reason for kubelet to not reconcile all the provided labels?


I was looking at this piece of code https://github.com/kubernetes/kubernetes/blob/d61cbac69aae97db1839bd2e0e86d68f26b353a7/pkg/kubelet/kubelet_node_status.go#L219 and noticed that the kubelet only reconciles certain labels if the node is already registered. What is the reason to not reconcile all the labels provided to the kubelet through --node-labels flag?

Thanks a lot for your input,

To provide some extra defense in the case of a compromised machine.