The Vim project seems to favor making everything work themselves.. Which is a shame, so much would be gained from learning from other projects and keeping up to date with best practices elsewhere.

My own very brief discussion about encryption in Vim makes me conclude that Bram doesn't want to learn from others (not from me, from current best practices in crypto) and doesn't keep in touch with others.