[Corrupt]

Correct, but if it's unsecure then the attacker gets your pad, rendering your cryptosystem worthless.

True, but the message is useless without a key and a key is useless without a message.

And like I said earlier, this form of encryption isn't meant to be used over the Internet where just about all forms of communication can be monitored. It is more suited for physical use (as opposed to digital).