So then why do they need weak encryption? Just do the same thing to capture the data at the endpoints, or use those methods to get the user's passphrase.