Well, the original reason they were created was to share really long links in places like twitter where there was a character limit.

The main use them now, but you have login to do, is to see who has clicked your link, how many times, and all the other data gathering metrics people use for things like newsletters, marketing campaigns etc.

Then, there is of course the potential for malicious use: https://tinyurl.com/2fcpre6