You make it seem like crypto is a solved domain. Implementation of crypto is incredibly difficult to do right even when the underlying "math" is provably secure.