I can understand his need for the IP range at some point but in general you are right.
Some companies may only accept connections from a previously whitelisted IP or IP range or otherwise their firewall servers would block it.
But yeah secrets are the way to go it somehow possible