In my experience it either blocks false positives, or lets sensitive information out with the slightest obfuscation.