Yeah. The issues is that in the environment they work in, there are no known secure recommendation algorithms that give good recommendations. So the only option is security by obscurity.