It isn't, but due to bureaucracy, when designing a solution, it's that solution that has to be "secure" without really considering that the current outside situation is already insecure..
Anyway I'm not advocating for this solution, just addressing the question directly.