It does, but it's still better than knowing your customer database is just "qwerty123!" away from being accessed by anybody who guesses it, or gets it from a basic phishing email.