I am not surprised. I got sick in 2014 and spent a summer implementing OpenPGP from scratch. It is _extremely_ ugly. If I was Google I would make something better and push that, instead of spending tearful days implementing the really bad specification that is RFC4880.