I'll give another example. My medical practice tried to do GPG encryption in a shared DropBox folder. Within the first week, someone decrypted half the files into the same shared folder...

It was all just a test with non-critical data, but the test was a total failure. And that didn't even get into key-related issues.