[warkdarrior]

So your argument is that 7z's insecure AES encryptor is not a problem because nobody _should_ use it?

[tptacek]

It's not a problem because nobody does use it in a setting where this is a practical problem. Somebody could use it that way. They shouldn't.

(My confidence here is high but not absolute).