One reason: Using a distribution that uses old OpenSSL versions (see my own post).