I don't understand- how they are lying exactly? Don't they explicitly ask you if you want to backup your recovery key to the cloud? Is it really that hard to

I don't understand- how they are lying exactly? Don't they explicitly ask you if you want to backup your recovery key to the cloud? Is it really that hard to read prompts and change the default setting to manage your own key backup? If checking a single radio button is all it takes to NSA-proof your device, I'd say we are in pretty good shape. What is everyone complaining about?