Sadly, the rules are this arbitrary according to security experts.