'dragonwriter is exactly right: the provenance of the format has nothing to do with its security. What matters is its complexity, and even that is just a threshold matter --- past a certain (very common) point you're just screwed no matter what.