If you depend on PGP, knowing that there's an incentive to break it, and that people are actively trying to do so is good news. It's in your interest for it to be very well tested. "I can break PGP and spoof Debian packages" is an interesting conference talk. "I can break PGP and save your business $40m in ransomware costs and only charge you $10m" is a business.