Which is all fine, and it's all very valuable work of course. The problem is when cryptographers say something is "proven secure" it turns out not to mean that

Which is all fine, and it's all very valuable work of course. The problem is when cryptographers say something is "proven secure" it turns out not to mean that nobody can hack it, especially in an actual deployed system. This is surprising to many people.