The app programmer is definitely considered as an user (or operator) of cryptography libraries. That's what the "user misuse-resistant" best practice is all ab

The app programmer is definitely considered as an user (or operator) of cryptography libraries. That's what the "user misuse-resistant" best practice is all about: designing tools robust to wider levels of user expertise.