Yes, you are right. But I think most people did not enable the security option so they wouldn't detect any interception of messages.