there could be some week pull ups/down internally connected to the controller pins.
you can even interface the keypad without any pullups. but when you connect the pull ups. you are sure about the ststus of that pin at certain time and you will not source much current from the controller pins when you make them ground.