Indeed. Although there hasn't been much public cryptanalysis on it (besides that it's susceptible to a cold boot), it's proprietary and owned by Microsoft.

Then again, he did say "at least". It probably is better than nothing at all.