Without a sound theory for security in these instances, wouldn't one be hard pressed to claim effectiveness? Is there a slightly different attack variant that o

Without a sound theory for security in these instances, wouldn't one be hard pressed to claim effectiveness? Is there a slightly different attack variant that overcomes the defense?