I guess that "always on" verification or short duration authentication could make this strategy less useful.