All security measures "simply shift the attack vector." The idea is to shift it to something that is more difficult to compromise.