Like most bold claims about security, it omits a whole swathe of controls that allow that to happen.