So you're saying all languages (and in fact ISAs, because that really describes WASM more accurately!) need to come with a static analyzer that detects and prevents any attempts of implementing low-level cryptography rather than calling out to a high-quality library? Because that's what happened here.

What we can do is provide well-tested and ergonomic high-level cryptographic libraries; I don't see how we can enforce their use.