It's certainly a way to keep the network secure. At best it's marginally better than POS. At worst, it's a ticking time bomb security budget cliff.