Not them, but this is the one place where that attitude seems reasonable: I am not a crypto expert, and therefore can't audit their crypto code, and the refrain is "don't roll your own crypto (unless you really know what you're doing)", so unless one of the devs is a crypto expert then it is 100% reasonable to both be rather worried that they're rolling their own and also unable to do anything about it.
Serenity is not really designed for everyday use, but more for enjoyment and as a learning experience for the developers. It's not really reasonable to be worried about it from that point of view, as of course it's not professional crypto, it's written by someone who wanted to learn more about it, and figure out how it'd work in a modern system.
Its pretty sad that you're concerned about how a hobby project is handling crypto enough to complain on a forum but not enough to contribute to the project.
