We're all aware that providers can be compelled legally to backdoor aggregation points (i.e. central servers), but could they be forced to put backdoors in their client software too? What about a letter or court order compelling them to re-engineer their software to either remove strong cryptography or force all traffic through a central point, thereby killing their business?
Yes, I think the only way to solve that problem is that the providers fully open source their client code and that the client code is built and proofed by the users.
