I was thinking the other day that people have forgotten that end-user data confidentiality is relatively simple, generally speaking, but we have built the wrong infrastructure (so far).