Yes, false sense of security hits the nail on the head.

Fits right there with unnecessary password rules too.