However it seems to me that to this day there is no proof they intentionally tried to weaken a standardized crypto algorithm, they seem to have instead relied i

However it seems to me that to this day there is no proof they intentionally tried to weaken a standardized crypto algorithm, they seem to have instead relied in the past on imposing reduced sizes of keys. But even that seems to have changed nowadays, AES 256 bits despite all the scrutiny seems to still be a safe choice. Of course, I don't know what are their plans concerning crypto but the backlash will be huge if it appeared they rigged an algorithm. Of course, if they happened to honestly find a significant flaw or make a breakthrough in quantum computing for instance I doubt they would tell the public either.