The question to me is: how do we avoid another FIPS-like disaster, where the government standards fall behind the times and lead to worse security then you'd otherwise get?
We can’t. That’s pretty much how government works in the best case. In the worst case we’ll get both mandatory worse security _and_ a rentseeking monopoly granted to donors and ex politicians to supply/enforce it as well.
