Can anyone explain why omitting the linear transformation in the last round of an SPN does not reduce security?