If somebody was trying to do something serious, they’d have some kind of ID that would get them through the actual security checkpoint. It’s only this bizarre scheme (that didn’t even work) where checking ID again would matter.

If we’re making an analogy to internet security, it’s like when websites use JavaScript to disable standard input into the password field. Just a pointless waste of everyone’s time.