but it is false sense of security as any one can screenshot it and use ocr to generate text again?

If a worker circumvents these options being disabled, that's a far worse issue. While before you can say "oh I didn't know", afterwards you can just be fired.

Or just intercept the API calls by looking at the network activity tab.