So now instead of just hacking a disabler, you need to: * hack a database to recover the symmetric key * hack the private key repository needed for signing th

So now instead of just hacking a disabler, you need to: * hack a database to recover the symmetric key * hack the private key repository needed for signing the requests * do it all without being noticed / getting the key revoked And really, all of those boil down to "gain unauthorized access to a system", which is to say now we can make the maxim "if it can be hacked, it can be hacked." That, I can agree with.