Possibly because an URL requires DNS and if you forget to whitelist DNS, then you cannot get past the walled garden. To "idiot-proof" this, you require an IP address instead.
Find my post helpful? Please give me a kudo!
CCNP Certified and Meraki Operator