I don't think many people (let alone businesses) would rather introduce a risk of being exploited by a hacker than a huge government agency that could care less

I don't think many people (let alone businesses) would rather introduce a risk of being exploited by a hacker than a huge government agency that could care less about their existence. And if you are in a position where the NSA does care to look at you closely, bad crypto is going to make their job easy.