You're really quite wrong on a few points here. There are more exemptions than that - correct there's one for personal data and the spooks but also quite a few others:
Information that is reasonably available - this may include a charge payable
Information intended for future publication. Information whose release would harm the economy, relations within the UK, international relations, defence, commercial interests, the development of government policy, anyone's health & safety or infringe parliamentary privilege. Also, communications with Her Maj, information on the awarding of honour, information held for the purposes of an investigation by a public authority or law enforcement, information which was provided in confidence, information covered by statutory prohibitions on disclosure, environmental information and, my personal favourite "information whose release would prejudice the effective conduct of public affairs". No scope for abuse of that last one then.
Your request can also be refused if it costs too much or is vexatious (the request, not the requester).
Plus, your request CAN be refused if you don't give your real name. There's little point in doing this if the information is going to be released but if anything is withheld and you want to appeal to the Information Rights Tribunal,as a court they can't hear the appeal without your real name.
Sorry to let facts get in the way of a good rant.