I think it was taken seriously for a while. Gates did it similarly with the trustworthy computing initiative, as well, but they’re all so hell bent of profits that it’s only a matter of time before the directive erodes.

I guess this is where regulation steps in (changing analogies and thinking about HIPAA and so on)