Exactly.
The basic law of system security is that a system can only be as secure as its weakest link. This applies to any system, from the infection-control in your car's air conditioning to a corporate intranet to the system of airspace control.
As governments seem hellbent on securing already reasonably good security procedures while keeping the weakest links every bit as weak as they've always been, the whole process will remain pointless at best and downright disingenuous at worst.