I mostly agree. I used the phrase "good faith" for that reason. You shouldn't assume anything is 100% secure. I'm just sympathetic to a good faith attempt without too many strings attached.

That said, I agree something is better than nothing, but if they want praise from a more technical audience (hacker news for this example) they're gonna need to do more than tie the proverbial square knot.