Can you explain why you say "it doesn't provide any security against malicious users"?