Let's say a state actor needs a window of 1 week to do some mischief. Just a couple of days to comprise network x. Assume the exploit is worth knocking off a known person, or creating a news worthy event. I think these bits give a false sense of security.
This doesn't really protect from a targeted attack of nation state dead set on keeping it a secret. That would be almost impossible. This is supposed to protect against the much more likely scenario that some government authority or government official decides to commit and overreach and order the disclosure of data and a gag order, but without the full support of the nations information agency.
It's not supposed to guarantee Putin that the US hasn't seen his porn collection. It's supposed to tell me (a regular guy) that the government hasn't seen my vacation photos in secret.
