EFF is not a trustworthy source of information about CISPA. I believe they're using it as a vector for fundraising. They're certainly not trying to educate about it.
https://www.eff.org/deeplinks/2012/04/cybersecurity-bill-faq...
That's a vague and broad grant that might enable many abuses: essentially, a government agent might say, "we'll share cyber threat info with you if you promptly turn off the threats we point out, and you'll be safe from any liability... or you can refuse to coordinate with us, and risk prosecution without this immunity". I would welcome more clarification from a legal expert with CISPA concerns.
I'm just glad to be using a company that is consistently (thus far) on the right side of this issue.
They're doing it though because it works and because there is no likelihood that they will actually be held accountable in a way that affects their bottom line.
We're talking about marketing here. Truth has no place in marketing. If your truth has any impact, you wouldn't need to market.