And who guarantees such setup would be anymore secure or any better implemented? It would probably use some custom protocol that is much harder to test with as

And who guarantees such setup would be anymore secure or any better implemented? It would probably use some custom protocol that is much harder to test with as poorly written implementation...