If you blame gpg for efail you can blame anything really for a virus on one of the endpoints of any form of encryption.
Next you will hold rensponsible tech for social engineering and mandate users should not know their own secrets because that causes vulnerabilities in protocols :p