Basically nobody cares. Vulnerability researchers don't use GPG either.