I really hope mandatory GPG is happening. Not just for order addresses but also messages. There is literally zero reason not to. If you think saving a couple seconds with worth losing any amount of security you don't belong here.
When you say "I really hope mandatory GPG is happening" do you mean an automated system of PGP encryption built into the site itself or a requirement for all users to use PGP encryption?
Well, the OP made the distinction clear. Automated PGP would be a horrible idea, it doesnt offer any protections if the site is seized because then theyd just have the keys anyways. What they want, and I think is a great idea, is mandatory checking of PGP in messages. You have to do the PGP yourself, but the site checks to see that any "plaintext" it sending has really been converted to a PGP message locally on the senders computer.
A simple script that checks that each message starts with -----BEGIN PGP MESSAGE----- would be a quick and dirty way to do it.
I have been rather sleep deprived this week so I've not been taking in the full context of some posts when reading them.
Well in that case then no PGP will not be mandatory, we are all responsible for our own personal safety, the right to use or not use PGP is a personal choice.
Synergy