The form that is being sent to the customer is public and the customer doesn't need to register or log into Salesforce to update it. Hence, we need to provide access.