The purpose is really simple: security / possible account thefts. I don't feel like digging into the details, so to put it short, 1 week for rollback is just not enough for the original account owner to notice suspicious things, therefore, the 14 days change is vital for enhanced players security. Personally, I'd also consider the SMS notification option.