I don't think your two examples are contradictory. It is silly to try to regulate export of strong crypto, and it is difficult to get crypto right.