Security certifications are one reason. OpenSSL maintains a module for FIPS compliance, which includes an entire boatload of weak and broken algorithms nobody else bothers with.
This kind of security certification seems like the exact opposite of actual security
This kind of security certification seems like the exact opposite of actual security