I meant by providing a zpub, it would still have been easy to verify the holdings, and for them to avoid signing multiple transactions using the private key for the same address. However @ODELL mentioned that they would change private key and address every time any outflow occurs, so the security concern I had does not really hold anymore.