&gt; meanwhile even encryption vendors get sloppy and wrong.<p>What is an encryption vendor, exactly?<p>Is Open Whisper Systems an encryption vendor? They&#x27;re pioneers in secure messaging, and they give it away for free. <a href="https:&#x2F;&#x2F;itunes.apple.com&#x2F;us&#x2F;app&#x2F;signal-private-messenger&#x2F;id874139669?mt=8" rel="nofollow">https:&#x2F;&#x2F;itunes.apple.com&#x2F;us&#x2F;app&#x2F;signal-private-messenger&#x2F;id8...</a><p>Is Paragon Initiative Enterprises an encryption vendor? We published Halite, a PHP library to wrap libsodium and make it <i>even harder</i> to use incorrectly. (Users don&#x27;t even have to know what a nonce is.) <a href="https:&#x2F;&#x2F;paragonie.com&#x2F;project&#x2F;halite" rel="nofollow">https:&#x2F;&#x2F;paragonie.com&#x2F;project&#x2F;halite</a><p>Or are you speaking about software vendors that erroneously implement their own cryptography features? If so, I totally agree. They do sloopy work.