If PGP, it's a huge hassle to set up, and both parties have to do it, so it's no surprise it is rarely used.