Security needs to be a default though. It will be a serious problem if this law ends up being interpreted as requiring encrypted messaging systems to accept insecure messages by default.