I think perhaps you used the wrong words there. The hash is an integrity check but it was never intended as a security check.