Sounds like the same school of reactive pseudo-security that gave us the TSA: broken in too many ways to count, patching one particular aspect of the problem when brought up or exploited, completely ignoring the big picture, and getting angry when questioned.