This is a line too far for me. I will not comply. I think we should all insist that we build systems where the encryption is open source, out of our control and we never have access to the keys.

It's time to get rid of passwords too. Start, step by step, getting users used to keys, and used to being responsible for them. IT won't happen overnight.

Doing this takes care of a whole lot of social engineering problems too where hackers could call your customer support reps and get access to an account via an out of band password reset.

It's not just about not trusting the government, it's about not trusting yourself. Your company could make mistakes procedurally, your employees can make mistakes via human weakness or trickery, and as a society we need the trust that comes with real security.