there is a case to be made that weak encryption is equivalent to no encryption at all