True, but you can at least correctly label it and no longer refer to it as a "secure environment".
You sound like the guys I know who work at banks, talking about all this policy, how secure they are.
There's absolutely no way to guarantee that ever again.