Right, "holding down the single button" certainly means the user has physical access, so this sounds like it is by design. There is context to security.