>none of the "encryption" done at scale at any Fortune 500 company in the US is more than a speed bump for attackers.

So why Fortune 500 companies only? I am just trying to understand what this has to do with the scale of a company.