I suppose it works if your threat model is corporate espionage and not state actors.