The difference is that the session is always already different in the underlying storage, while here it is the same address space to which you are writing to, introducing a quite significant (if not even absurd) security issue