So many ways to lose with cryptography. Cryptanalysis is a very alive field with very quiet buyers. So many websites use insecure cyphers for their TLS so many

So many ways to lose with cryptography. Cryptanalysis is a very alive field with very quiet buyers. So many websites use insecure cyphers for their TLS so many industrial systems have out of date cyphers or, worse, hand rolled "crypto" because they were written 20 years ago. A protocol downgrade attack is easier than cryptanalysis, but it's observable. If all you want to do is surveil (not fabricate, modify, or deny) it's safer to do cryptanalysis since it's undetectable. Exfiltrating a key from, say, COMODO involves not just stealing the key, but using it involves generating a false certificate. It's a matter of scale for some actors. Crack as many cyphers as you can and log as much intercepted traffic as you can and decrypt it quietly. For important targets if that doesn't work, sure go hack the server and steal the key, certificate, or data directly.