It doesn’t help that the historically dominant userspace implementation of most of this stuff was OpenSSL, which is also terrible.