But if the theory allows the attack, even if it seems impractical, there is likely to be a practical attack that is slightly different.
The difference between a system that is provably secure and a system that is theoretically insecure but with no known practical attack is a pretty big difference. In the former case, your proof has to be wrong before you lose, in the latter, someone just has to think of something you didn't.