Is it true that PGP 5.X is not secure?