I think the fact that this is true and well known(amongst those that could abuse it) is evidence that infosec, by and large, is overemphasized.