But it sounds like in the Cryptolocker case that the encryption was pretty good, they just (thankfully) weren't erasing the decrypt keys as promised.

The goodness of the decryptCryptolocker crew will probably make me laugh whenever I hear some other not-half-as-good organization claim "we're the good guys".