KRACK was a nonce re-use, not a core protocol flaw. WPA2's flaws are more around un-encrypted control packets; i.e. I can de-auth you without having to get session keys.