That is true for most code protections other than moving the code away from the client. Developers definetely need to understand they they are only making it harder but not preventing access.