I don't mean to say his suggestion is bad. For what it is worth, I just want to clarify this :) I too, am not too good with security stuff either (still learning!) and thanks!
Seriously though, he's the kind of privacy person you wouldn't think you'd be listening to a law textbook because he obviously is pretty good with web technology.