Privacy and encryption work, but it's too easy to make a mistake that exposes you.