Heh, after working with banks I've learned the compliance industry is about having useless security controls that are put there as it's easy to put a check on a box beside them.