That part is not so much about security: it would be entirely possible to make a secure standard protocol for such things, it's just there's enough highly opinionated people involved that no-one can agree and they each do their own thing.