Good explanation of why AES-GCM should be frowned upon - catastrophic failure upon nonce/IV reuse. Use XChaCha20-Poly1305 if you are dealing with low computing power devices or the lesser well known AES-SIV or AES-GCM-SIV modes... and use post-quantum resistant key exchanges like KEM.