The thing is, it always was. It is more about compliance with procedures than any real security.