You vastly underestimate the complexity involved. Also, new attacks get discovered that were not even dreamed 20 years ago. There is no "just get it right" when right is measured by what we know, and that keeps changing.