@iain It doesn't help that I know full well all the security they want could be achieved _without_ breaking SSL and sending all their private data via America just by keeping their browsers and OSes up to date, with no cloudy subscriptions at all. Big rich companies full of people who are very clever in their field, which is not tech, are often suckers for a sharp salesman who says "this service will mean you don't ever have to think about it".