Because there are malwares that can edit the address from your clipboard and replace it with the hacker's address.
Some are even mimicking the address by generating the same first and/or last few characters.
thats why if you check the first 3 or 4 chars AND ALSO the last 3 or 4 chars, you're good to go.
i dont think malware can do that.