I thought communication between the tower and the device was encrypted?

That's not to say it's not using some archaic weak encryption scheme left in for backwards compatability though.