Data read from files is also tainted. I disagree with the 'false sense of security' as well - just like every other security feature from any system or techniq

Data read from files is also tainted. I disagree with the 'false sense of security' as well - just like every other security feature from any system or technique you care to name, taint checking improves security but makes absolutely no claim that it magically makes your code completely secure.