It's so full of foot-guns that the implementation you are using almost certainly missed a few; It has been partially broken so many times that it's expected it

It's so full of foot-guns that the implementation you are using almost certainly missed a few; It has been partially broken so many times that it's expected it will be partially broken again; (That's how foot-guns are born.) It is slow and expensive, even more because every time it's broken people have to increase their key size, making it slower and more expensive; It's very flexible, so that people keep using it wrong again and again. Arguably that could be a benefit, but it's hard enough to make people use it right, making them get an innovative usage right is almost impossible.