I really can't tell whether this is an outright scam, or an earnest attempt by someone completely unqualified (and completely unaware that they're unqualified, per Dunning and Kruger).
I'd also doubt they "had two of the largest security firms provide remote and "in hand" vulnerability assessments on nomx", or else they just completely ignored their advice.
I actually like the idea: a plug-and-play email device that will do p2p with your known contacts.
Just needs more development to make it work, and then some more to make it work securely!?
With IPv6 some issues could be solved.
Are there other examples of similar systems?