You're putting words in my mouth. If you design a system based on guarantees, it's going to be brittle. It will fail, and it will be very unpleasant. If you de

You're putting words in my mouth. If you design a system based on guarantees, it's going to be brittle. It will fail, and it will be very unpleasant. If you design a system to handle contingencies, like elected official's data getting through, it's going to be more resilient. If you design a system that will handle contingencies and then spending as much money as you can on preventing those contingencies from needing to be used -- well, you're finally developing something useful. Hell, the best guarantee a cryptographer can give you is a one-time pad, and they'll tell you that the human factors involved will be just as bad (and probably worse) than algorithms with weaknesses. But, back to putting words in my mouth: this stuff shouldn't be shared because spying on American citizens is unconstitutional and giving the data to allied nations is backstabbing us in the name of national security -- not because it's impossible to build a perfect system to protect elected officials.