You are correct, the separate interface it to make it clear to the user it is using a secured EJB.