But convicing people that their own government can come in with a subphoena is easier than convicing people that their security just isn't likely to be good enough to stop each and every external hacker that tries.

No matter how many examples we get of far better funded companies getting hacked.