Nope, not really. 1. They are choosing and then providing devices. This is very important because it means they have physical contact with the device, initiall

Nope, not really. 1. They are choosing and then providing devices. This is very important because it means they have physical contact with the device, initially, so they have means to bootstrap cryptographic system by way of injecting keys, etc. 2. They are middlemen transferring messages between multiple parties that use their devices without having to understand the secret part of the message and only routing the messages. 3. They are paid well enough for the service that they should be able to cover expensive devices and processes like manual key injection or expensive hardware security modules. 4. The core of the business is security, if it is not provided nothing else will change the fact they have not provided what they were paid for. The only real difference from payment industry is that the threat is from governments, too.