This kind of security certification seems like the exact opposite of actual security