Comment by jerf

My point is that it is not an unrealistic case. In a security context, it is perfectly realistic.