I didn't argue that releasing an app with a weak crypto was okay. I replied specifically to this point -

> Crypto doesn't get beta-tested into resiliency

and crypto can most certainly be beta-tested into resiliency. It all depends if they are learning from their mistakes.