Behind the Encryption Curtain: Big Tech’s Broken Promises and the Fight for Default Privacy

Picture this: you send a private message, trusting it will stay between you and its recipient. But in reality, a silent audience-corporations, law enforcement, maybe even an AI-could be watching. That’s the unsettling status quo the Electronic Frontier Foundation (EFF) is challenging with its new “Encrypt It Already” campaign, a direct call for Big Tech to put real privacy at the center of our digital lives-before it’s too late.

The “Encrypt It Already” campaign isn’t just another privacy petition-it’s a pointed reminder that tech companies have repeatedly pledged to protect user data, only to let those promises languish. The EFF’s demands are simple but consequential: release the features you’ve already promised, turn on existing E2EE by default, and match the data protection standards set by industry peers.

Why the urgency? As platforms like Facebook Messenger, Bluesky, and Google flirt with E2EE, users are left exposed. For instance, Meta has enabled E2EE by default for one-on-one Messenger chats, but group messages and Instagram DMs are still stuck in testing or remain optional. Bluesky, a rising star in social media, has yet to even start building E2EE for its direct messages, despite public assurances. Meanwhile, Ring’s security cameras require users to navigate a labyrinthine 16-step process just to turn on encryption-a loophole that leaves sensitive footage vulnerable.

“Most users don’t change default settings,” says Thorin Klosowski, EFF security and privacy advocate. That means if encryption isn’t on by default, most people simply aren’t protected. The stakes escalate as artificial intelligence becomes deeply embedded in our online lives. AI-powered assistants, with their sweeping data access and minimal oversight, could turn every unencrypted conversation into a data mine.

But there’s a tension at the heart of the debate. Law enforcement agencies argue that E2EE hampers investigations into serious crimes, including child exploitation. Yet, privacy advocates counter that giving third parties a backdoor into private communications opens the door to abuse-by governments, corporations, or hackers.

Some companies have made progress: Apple’s adoption of advanced data protection for iCloud shows that comprehensive E2EE is possible. But as AI accelerates and digital surveillance grows ever more sophisticated, the EFF and its allies warn that half-measures and broken promises are no longer acceptable.

The encryption standoff is a test of who controls our data-users, or the companies and algorithms that profit from it. As the EFF pushes tech giants to finally flip the switch, the message is clear: privacy can’t wait for another product cycle. The time for empty promises is over-encrypt it already.

WIKICROOK

• End: End-to-end encryption is a security method where only the sender and recipient can read messages, keeping data private from service providers and hackers.
• Default Setting: A default setting is a pre-set option applied if users don’t change it. Reviewing defaults is vital for strong cybersecurity and data protection.
• Artificial Intelligence (AI): Artificial Intelligence (AI) enables computers to perform tasks such as learning, reasoning, and problem-solving, which typically require human intelligence.
• Rich Communication Services (RCS): Rich Communication Services (RCS) is an enhanced messaging protocol that offers features like group chats and media sharing, but can be vulnerable to scams.
• Opt: Opt is a browser signal that tells websites you don’t want your personal data shared or sold, enhancing your online privacy and control.