So who is to blame? AT&T for incompetence while implementing the old IKEv1 version, or IPSec/IKEv2 for apparently not being able to be attractive enough for AT&T?