All true, but I did learn that there are two similar implementations, one NSA and one not, and Satoshi went with the latter.

If someone can crack SHA256 etc, they 1) have cracked a lot more than bitcoin, and 2) it will be highly monetarily advantageous to him to not reveal it nor F with it.