With hdparm, why do I need to set a password before secure-erasing the drive?

To use hdparm's --security-erase, I need to provide a password; and for that to work, I need to first set a password. Why is that? i.e. if I've never set a security password for my drive, why wouldn't the secure erase functionality just work with no password specified?