You know better than that. He was referring to information security, not legislative compliance.
There are very real consequences in the real world when these checks get skipped or overlooked.
That goes double when "terrorism" is brought up, which is a metasituational justification for nearly any conceivable rule.