MAC-then-encrypt is a pet peeve of mine. It is so much safer to apply the message authenticator AFTER data has been encrypted, after which point it protects both the cipher text and the underlying plain text. Yes, I'm aware that there are reasons for going the other way, but having written plenty of secure communication suites over the years, I don't see any of them as especially compelling given the potential dangers.