I don't think that's really an accurate portrayal of what happened with AES and 3DES. NIST (aka the US government) were the ones that introduced AES and recomme

I don't think that's really an accurate portrayal of what happened with AES and 3DES. NIST (aka the US government) were the ones that introduced AES and recommended everyone switch over to it. 3DES was kind of a quick hacky extension to DES after it was found vulnerable to brute forcing in the late 90s to have something 'good enough' until a more suitable replacement was developed (which was AES). By the time any practical attacks had been developed against 3DES (Sweet32 from 2016 was probably the earliest) almost everyone had long since stopped using it other than in old legacy systems. Firefox still uses 3DES to encrypt its password database though... it's probably not a major issue because all of the publicly known attacks on 3DES require gigabytes of ciphertext. Wikipedia has a 'citation needed' claim that "the whole 3DES keyspace can be searched thoroughly by affordable consumer hardware as of 2017" but good luck searching a 112 bit keyspace. I certainly agree with your general point though.