Much like every form of security measure, the intention is not to completely eliminate the possibility of an attack (which is impossible in most cases). Instead, the intention is to increase the amount of effort that’s required to make an attack.