Yeah exactly - requiring either an existing physical key, or an impractical rolljam attack is much better than what they have apparently implemented.