You've raised a good point about one-way tickets and other "red flags." Since air piracy and sabotage are so rare, it's impossible to develop a statistically valid "profile." In other words, we're using anecdotal evidence, rather than statistical measures to develop these profiles.
This isn't entirely bad; it means we haven't had enough air terrorism incidents to have good statistics!