That's the only way.

With other subroutines, you can rely on the caller "knowing" that it'll destroy a register, and so the caller can save the register if it needs to.

An interrupt can happen at any time without warning, so the "interrupted" code can't know when it needs to save a register. Therefore the ISR must save every register which it changes!