If the connection by default cpanel is enabled for ftp access, then hacker can easily steal account ftp and load the script. Thus, for the reason of security to disable access FTP for cpanel users means «domain.com» is the field and domain is the cpanel username you cannot access the ftp account using the domain user.