They say on their website what they believe they add, but unfortunately right now it still isn't in a stage to replace GnuPG. I will say trying to automate GnuPG key management sucks right now, so at least Sequoia might be able to get the DevOps crowd.
The only way to programmatically interact with GnuPG is through spawning the CLI. Not good.
Best summarization evah!
What's wrong with gpgme?
It's thousands of lines of C code that just wraps an actual execution of the `gpg` binary?
That sounds like a lot of pointless work. I had a quick look and could not find anything about that. Do you have a reference?
You could start by, you know, Googling the source code for GPGME. Or, for that matter, reading the GPGME documentation. This isn't an eldritch secret of how GPGME works.
Yikes...
It can encrypt for expired keys.
I might be missing a legitimate use case, but that doesn’t seem like a good thing in general.