My tin foil hat says the security is crap on purpose so they can push through those regulations they've been lobbying for for years.

But I also know that security is hard (and we seem to barely understand these things), so maybe that's unnecessary.

Whose security is intentionally crappy in this scenario?