The problem is the asymmetry of costs of a false negative and a false positive. A false positive means some dude with an unlucky name has to drive instead of flying. A false negative means some terrorist gets on a plane, blows it up, and some politicians get blamed for it.

Though, yeah, it feels like a bit of security theatre. A more transparent process would probably help. Maybe the thinking is that it would jeopardise sources?