It is as long as the state/ IPs do not have identity on every connection. It can even then be subverted, if somebody lets another user piggyback on that connection.