Allow me to provide another a hole in this - Do you know you can pass TSA without a passport with an international BP (Note - SFO is not run by TSA)?
As you have mentioned, swapping BPs are possible, and in fact impossible to avoid.
There will be holes for sure. The main question is will that hole compromise security.
The key is all passengers beyond TSA are properly examined, which is the case.