I just kind of think that encryption is one of those things that's best done by people who really know a lot about it. Like, I think it's okay to program if you

I just kind of think that encryption is one of those things that's best done by people who really know a lot about it. Like, I think it's okay to program if you don't know everything about data structures and algorithms, but I do not think it's okay to represent like your app is cryptographic secure when you're not extremely experienced and well versed in the field. Even if you're not rolling your own crypto but using someone else's. The extent to while I'm comfortable using someone else's crypto is LetsEncrypt with an integration for the K8s nginx ingress controller. But I will not personally warrant/represent that my at-rest or E2EE solution is sound. I would be uncomfortable with that.