The fundamental flaw of shape matching is that it can only identify known formats with distinctive features; high-entropy random strings without a fixed prefix are hard to distinguish from ordinary text, and URLs carrying tokens often escape the rules because their parameter names are non-standard.