Yes it does, but why would that exception be needed if it was such a good infallible system that they are proposing. They know of the problems of their proposal and are not willing to have it in a corporate or their own systems but it’s supposed to be fine for the masses to have security and privacy issues