[bjoli]

I suspect it was more of a "this is old and crufty and isn't how we would do it today".

Guessing the 128-bit number is non-trivial, and once someone has the ability to access the group id, all is already failed.