Six years ago I had a 14 page NDA from a big client that took three weeks to get through their legal, and when they finally signed it they told me they had a boilerplate version they use for everyone that was 3 pages. I remember feeling stupid for not asking sooner. One thing though, you said the clause about their state being unenforceable, but NDAs are usually governed by whatever state is written in the agreement, not where the vendor is located, so if that lawyer was right about it being unenforceable it might mean your contract had a weird choice of law clause or something they could actually fight. Most small firms just sign whatever they get, so honestly the length thing is more about trust than actual legal protection. I cut a non-compete disguised as a confidentiality clause once, that was the trickiest one, because it sounded normal until you read it twice.