Exactly! Good summary! PGP itself is still secure, luckily.
Let's say I formulated it that way to get peoples attention :)