The requirement was that the data be encrypted, not that it would be secure.