If reconfiguring a service to use a different crypto algo was easy then I’d agree with you. But it is often really hard and makes config difficult. To be hones

If reconfiguring a service to use a different crypto algo was easy then I’d agree with you. But it is often really hard and makes config difficult. To be honest, when something like WireGuard becomes victim to a flaw in one of the primitives then I’d rather they release a WireGuard 2 to address it - keep as much config the same as possible but throw away any notion of backwards compatibility with vulnerable versions.