I thought you were being serious as well. I’ve dealt with enough people who would genuinely make that argument so I assume nothing.

Effort or no, if an attacker can reasonably bypass it, it’s not secure. That’s why software gets security patches all the time, why encryption/hashing algorithms can fall out of favor, and why quantum computing can be pretty fucking scary.