@Cyborus Basically yes. Also that we can't demonstrate compliance with any solution because the problem is often underspecified, but yes.
Or, if you prefer:
It's not that the problem can't be solved in theory, it is that it practice it requires a lot more than simply demonstrating one way to do it in theory, or in an environment that is not applicable to 90+% of deployed installations.