FIPS usually implies a bunch of counterproductive architectural decisions and makes it harder/slower to produce security patches. Also, FIPS used to mandate su

FIPS usually implies a bunch of counterproductive architectural decisions and makes it harder/slower to produce security patches. Also, FIPS used to mandate support for an almost-certainly-backdoored cryptographically secure random number generator, and continued to do so well after it was obviously flawed: https://en.m.wikipedia.org/wiki/Dual_EC_DRBG https://en.m.wikipedia.org/wiki/Dual_EC_DRBG