CCAs have historically been useful for defeating the confidentiality guarantees of cryptography protocols. BB'98, Vaudenay '02, the iMessage attack, etc. Selli

CCAs have historically been useful for defeating the confidentiality guarantees of cryptography protocols. BB'98, Vaudenay '02, the iMessage attack, etc. Selling "encryption, but not IND-CCA3" to a lot of (clueful, at least) companies is almost impossible. If you read the linked article, it discusses a way to hack it in.