Disabling this will increase the potential attack surface if the wpa_supplicant daemon becomes compromised, but it may be necessary for more complex enterprise networks (for example requiring access to mutable files, smart cards or TPM devices).