If there was a known attack it would obviously be a non-starter. But why take the risk that someone will come up with something comparable - in the broadest sen

If there was a known attack it would obviously be a non-starter. But why take the risk that someone will come up with something comparable - in the broadest sense - to say the differential attack on MD5 that allows exploiting known bits in the salt if there is no need to?