Agreed. He seemed to make a decent argument that the quantity of records + types of data exposed didn’t add up (based on his knowledge of the system), but this

Agreed. He seemed to make a decent argument that the quantity of records + types of data exposed didn’t add up (based on his knowledge of the system), but this statement (about primary encryption keys) undermined the credibility of the overall piece.