These privacy codes should be thought of as a type of filter allowing you to control who you hear, but not who hears you. They don't afford any security. If someone's radio has no tone set, they will hear everything on the channel regardless of privacy code. They work by adding a subaudible tone (67-250 Hz or so) onto your voice, which is below the range of what 2-way radios will reproduce through the speaker. If your radio is set up with that tone, it will keep the speaker off unless it hears that tone. But if someone's radio isn't set up to use a code/tone, they'll hear everything. DCS is a similar concept, but instead of a steady subaudible tone, it uses a subaudible digital signal. The original intent with these tones long predates GMRS, and was for cases where users in two distant cities might have the same frequency, and weakly hear each other. (Or cases of random noise on the frequency.) The distant signal was weak enough to not interfere with local communications, but annoying to listen to when it came through during times of silence. CTCSS allowed those people to set up a "private" tone that they'd use and not have to hear the distant user / noise on the frequency. They've also found use on repeaters, where people can set up an unpublished tone required to bring up a repeater. In that case random people might transmit on the repeater input frequency, but without the right tone, the repeater receiver won't open up. It's hardly bulletproof security, but it keeps casual unauthorized users off.