It's certainly not obvious to a normal user, and that's fine. But if you even somewhat understand security this should not come as a surprise.