Comment by strictnein

40 bit encryption in 2000 wasn't seen as bad, it was seen as decent. It would have required a fair amount of computer power to break in a short time.

It was also what was legally exportable at the time.

Providing some security is better than providing none. You lock your doors but have glass windows.