Why are there separate access methods for management and traffic?

The management interface allows administrative traffic. It does not allow application traffic (clients connecting to your servers/pools). The switch interfaces (1.1, 1.2, etc) handle the application traffic between clients and servers. The port lockdown setting on the self-ips will allow admin traffic (ports 22, 443) on the switch interfaces if you need to.