Makes sense. Do they have competitors, who aren't tied to the NSA? If not sounds like a business opportunity, or perhaps, a way to stop breathing...
Then again, if I'm understanding you correctly, you're saying any man-in-the-middle type of service could steal people's keys, so what'd be the point in contracting with a non-NSA one?
Sounds a little disheartening. :/