> The complex knowledge required to develop such software is subject to intellectual property rights, making it difficult to turn into a commercial product.

Intellectual property rights aren't a security mechanism.

If the people in power at GSM are this clueless about security, I don't think they will ever be capable of producing anything usably secure.