At what point is that mantra pushed by a state to keep their holes active in existing crypto libraries?

Maybe it should be "never roll out your own crypto without independent review and verification as well as thorough testing" .