Comment by bityard

I don't know if anything has changed but 10 years ago I was part of an effort to make the base OS of our product FIPS-compliant. FIPS was both prescriptive and outdated. And it turned out that the changes required to make everything FIPS-compliant actually made our product demonstrably less secure.

But we had to ship it anyway, otherwise a non-negligible portion of our customers could not legally buy our product.