In fairness, they backdoored the company, the crypto algorithms and the devices at Crypto AG.

Anyway, there are many more recent examples: https://en.wikipedia.org/wiki/Crypto_Wars

Don’t get me started on the unnecessary complexity added to TLS.