The article is clear about deferring fully to GnuPG on this difference of opinion: “gpg signaled an error; the applications didn’t adhere to the API contract.

The article is clear about deferring fully to GnuPG on this difference of opinion: “gpg signaled an error; the applications didn’t adhere to the API contract. I have to agree with the GnuPG developers, …” yet making the additional point that if your API leaves room for a difference of opinion to result in a serious security vulnerability, your API might have room for improvement: “… and add: gpg’s interface was (and remains) a disaster waiting to happen, because it doesn’t guide the user to do the right thing.”