It's not that you have to understand the details of the math of encryption or write your own library, you need to understand the processes required to use it. It's easier figure how to use GPG/PGP than use Mercurial or git.

And almost all users, and most IT folks and developers are too lazy to follow processes. Plus management and shareholders don't want to invest the time and money for training or implementation.