Something can be worse than nothing when it tricks users into thinking it provides meanigful security guarentees.