Maybe he wants someone to repeatedly pay him. He would only send a xpub of deposit addresses not of his entire wallet.