Because anytime I've ever done anything in cPanel, and it doesn't matter what host it's been, it affects every website that I own on the server (I have a bunch of addon domains) and I don't want that. I often use avatars and sigbanners on a lot of forums that I'm on. It's way easier for me to put the hotlink protection in the .htaccess of the sites I want to protect.