It's more accurate to say "don't implement your own crypto to use in production" - IMO everyone should implement some crypto to understand the basic principles,

It's more accurate to say "don't implement your own crypto to use in production" - IMO everyone should implement some crypto to understand the basic principles, but there are a lot of possible failure modes which aren't immediately visible (e.g. timing attacks).