That is true. It's a tradeoff when you consider to turn off SELinux, too, however.