Just because it may not look effective is not always the case, it has worked up to now.
That's exactly my point in the last of my post... maybe they just want us all to THINK security is crap, so they can see which areas or 'weaknesses' people try to push...?