What security issue is actually being solved here though?