Tangentially, their steps listed to verify PGP signature is the prime example of why PGP has such dismal adoption.