It was robust against disruption, but it was not secure against attacks.

The threat model that was considered was bombs blowing up routers, but at the time, intermediaries intercepting traffic was not considered.

I believe it was because they considered securing the physical apparatus. Are memo secured? Are books secured? At the small scale of the networks at that time, few things were worth securing.