So it is also with cryptography vulnerabilities. In the practice of engineering, if you build a boat anchor out of lithium, you will be fired and probably sued. Things come with stated limits and intended purposes.
You know, like GCM and 4GB of data.
In no other field does an engineer get to just put random parts together, run a process through it for 5 seconds, dump a bunch of water in and see that it fails, and then sell the assembly at scale. But that is how we build and test software.