Matt Green inferred that both companies most likely use a single global key to encrypt all client reasoning data, which constitutes a key management anti-pattern.