Declan McCullagh suggests buying PGP rather than using GNUPG [MP3] (media.cpr.org)

Fast-forward one third of the way through, and there is no mention of the open source option which simply seems odd to me.