You're right, of course. But standards bodies also sabotage their own work when there's no security relevance (USB's dozens of options with impenetrable names

You're right, of course. But standards bodies also sabotage their own work when there's no security relevance (USB's dozens of options with impenetrable names like "USB 3.2 Gen 2×2") And the US DoD reportedly loves Trusted Platform Modules, so presumably if the US intervened at all it was to improve the spec - and yet it's got more holes than swiss cheese.