The cost is negligible and the card is pretty secure. I get that people probably won't want to change the card (much) when it's up and running, but removing screws in order to change from Volumio seems a bit laborious (and out of the comfort zone of some perhaps).I suppose it's down to cost and/or how often you expect to change cards for updates. The card sticking out the back panel could be prone to damage when plugging connectors in as well, its pretty safe where it is.
Most of the updates can be done using SSH anyway. A half dozen screws is not much to deal with if its not a regular occurrence. I tend to fit the card at the outset then don't touch it once set up and the configuration has been copied to my Laptop.
I suppose I'm asking why Okto would preload Volumio and then make it relatively difficult to change that?