Why Schneier says the algorithm is rarely the weak point

Mathematical cryptography is usually not the weakest link in a security chain; effective security requires that cryptography be combined with other things.