Maybe we should just treat the pipe as insecure and focus on encrypting the app layer.

Voice calls and SMS are presumably getting less and less popular.