Odd, because export controls don't generally apply to published material (like open source software), but maybe they were worried that because they were also selling the hardware they could have issues due to the combo being export controlled.
Not always, but pgp wasn't exported that way until not long before there was good demand for for encryption in e-commerce anyway