It (partially) protects against the attack vector in which the system was badly coded and simply does not do what everyone with basic competency insists all sys

It (partially) protects against the attack vector in which the system was badly coded and simply does not do what everyone with basic competency insists all systems must do. I strongly suspect that this is the most common attack vector in cybersecurity.