It doesn't prevent exactly what my comment said it doesn't prevent 'an adversarial entity physically residing within the space'. If I showed up with a pi bristling with antennas, loaded with an unknown, encrypted payload, and plopped it into your living room, would you just hook it into a vlan and be like "there, now I'm safe"?