Why the NCSC decided to advise against this long-established security guideline.