The PGP, Inc. controversy was, I think, heightened by the bug that allowed an ADK to be added to a key packet without voiding the signatures on that key. At the time, I recall several people opining that such an oversight could well have been an intentional move to facilitate surreptitious encryption to an ADK held by a TLA. That, more than the business case for ADKs, seemed to be the main sticking point.

That being said, the move for data retention is still repugnant.