just encrypting is good enough, right?

from here (source image one, two, and three)

the install and forget mentality strikes again. big name companies using short encryption keys like it's 1999. this is why i don't trust so-called transparent security - if you don't involve a person somewhere along the line then the security falls down.