It's only when they can't be sure there are not security implications. After all they don't try to build all combinations and so on.