The idea that simpler laws won't get exploited is... Well, I get it, because that's how one operates in computer security, but the way the law works is necessarily quite different. It's not designed so much to make doing what is illegal impossible as it is to make it possible to prosecute those doing things that we'd like to discourage.