Why do vpn/application gateways need to be in their subnet?

Normally in a network, your default gateway would be in the same subnet (well, mine is at least), but I can't figure out why azure requires your gateway needs to be in their own subnet, with like 3 spaces?