![vice versa watch vice versa watch](https://i.ebayimg.com/images/g/eRgAAOSwYRJdXGTq/s-l300.jpg)
Users can do kubectl get pods and kubectl get pods mypod, but not use the -w option. You could deprive someone of watch to reduce the number of watchers on etcd. In practice, in most cases where there is list there is also watch.
![vice versa watch vice versa watch](https://i.pinimg.com/originals/90/ab/07/90ab0772737ca1029ec623cbd023a2bf.jpg)
You want someone to be able to read resources they know by name but not discover what other resources exist. And to see which API requests kubectl makes under the hood, you can increase the log verbosity, for example, kubectl get pods -w -v 10. For example, you can inspect the default ClusterRoles by browsing through kubectl describe clusterroles. There are many more examples in practice. Interesting question, here are some ideas and examples of usages in practice.