the problem is not the crypto, it’s how devs implement it