Because it’s industry standard.
Rate limits are usually put in the header so that if you perform an API request for Item A today, then Item A tomorrow you can diff them without having to modify the output to remove the rate limit information from the data.
Rate limits are not the data you requested hence they are in the header and not in the data.