original .95 text is somewhat more clear, looks like some words got dropped:
>The behavior of an LRS SHOULD NOT rely on Agents with an account using the temporary credentials endpoint as the homePage and with matching account names coming from the same source, as there is no way to verify that, since multiple unregistered applications could choose the same consumer key.

So, let me paraphrase by saying that "Account objects with a homePageUrl set to the temporary credential URL SHOULD never be considered equivalent, since anyone can claim to be any user with that homepage"