It was explained to me why the present system isn't fully secure. I'm just not geeky enough to give an good explanation, but it did make sense at the time.
As for issuing documents from somewhere other than the test station, DVSA do monitor IP addresses and will ask for reasons if a different one to the VTS shows up on the test log.