I think it would have been even worse for FasTrak if Nate had got up on stage and said that they tried to pass XOR off as encryption. Then the story would not only be negligence, but also incompetence. There's a plausible story you can tell for why FasTrak isn't secured at all.