Presence isn't protection.

The useful question is whether the control is capable, available, implemented and reliable enough to interrupt the pathway to serious harm.