The roadmap being, basically stay away from commercial encryption software. Don't trust hardware that you can't see. Worry about secure routers as much as worrying about secure endpoints. Shouldn't that have been obvious?