No security measure will 100% prevent attacks; any security measure is about increasing the cost to attackers. Forcing attackers to be active is a good thing on this measure (though of course if you can use a technique that is also effective against active attackers this is better still).