What is written and what is done in practice is always different. "Anti-fraud" and "security" are things you can drive a truck through.