Just FUD, but I don't think it's sufficient to /intend/ to protect user data, you must also have the /capability/ to actually protect it.