It's not true that something isn't valuable just because it hasn't scaled. PGP has an outdated and confusing UX, a broken threat model, and is extremely bad in

It's not true that something isn't valuable just because it hasn't scaled. PGP has an outdated and confusing UX, a broken threat model, and is extremely bad in many respects. But it does have users, and for some people and some tasks, it works better than alternatives. (My use cases: exchanging routine work email with other nerds who have it set up, share confidential documents.) So, while we shouldn't minimize its very major problems, we shouldn't pretend that its user base does not exist and that it's not addressing at least some use cases.