I have never liked the approach of “fixing” security issues by just marking them out of scope.
Cryptography needs to be resistant to footguns. You should NOT be able to misuse without going out of your way.
This trivially allows that with a simple oversight
