I'm not saying that it's not solid software, or that the help isn't extensive, or that it works 'well'.
For open source software, they don't use the usual models (bug tracking software, easy reporting from other developers, etc.). It's not straightforward to compile straight from source, and the licenses restrict distros like Debian from packaging it.
I can't find much more than this article (linked below), which is a bit tin-foil hat. But I have read articles with more standing behind them, saying similar things.
So I'm keeping with GnuPG. It's free software, you can easily compile from source, and it works very well.
beso: I'm definitely not trying to sell anything (any security software should be free (open source) software), and I'm not intimidated by the information.
http://www.derkeiler.com/Newsgroups/sci.crypt/ 2005-02/2356.html