It’s another layer of defense. Someone has to not only know your credentials but also know how to use them to get to the jump host, and from the jump host know

It’s another layer of defense. Someone has to not only know your credentials but also know how to use them to get to the jump host, and from the jump host know what to do next (although unless it’s ephemeral, there are probably enough bread crumbs to find the proper url).