It's neither good or bad, but a reflection of how complex real security is, that being perfectly secure is likely impossible, etc.