The key word there is RECOMMENDATIONS.
Countries do not have to abide by them and many don't. The security features vary from several sophisticated features to hardly any!
And security features are rendered pointless if the operators at immigration desks cannot recognise problems with them!