Correct. They indeed do this in the name of security as announcing they do it for profit would probably be bad PR.