Actually I agree with you but I wanted it to be consistent with https://github.com/Sylius/Sylius/blob/master/src/Sylius/Bundle/CoreBundle/Controller/ProductController.php#L35
I can of course change it to receive user directly from entity repository.