Authentication for position update

Hi,
why there is no authentication needed for pushing positions like when pulling them?

That's just how protocols are implemented.