This discussion reminds me of this bit of security theatre: <https://wpollock.com/images/Security-done-wrong.jpg>