Unless every single employee actually follows this clause, just one bad apple can ruin every security procedure in the world. Layer 8 is awfully vulnerable...
the point of good security architecture is exactly that such thing can't happen. Security by compliance isn't good security.