[batoure]

>susceptible to implementation errors.

So just like anything else you might want to implement if you do it wrong its insecure.

[tptacek]

So really what everyone should do are PAKE schemes based on isogenies, because then we're all post-quantum secure, and, after all, it's only insecure if you do it wrong.