Why are the JCE Unlimited Strength not included by default? : <h2>Setup</h2>

<ul>
<li>Java doesn't offer out-of-the-box support for the JCE Unlimited Strength Policy Files</li>
<li>This prevents users from using AES-256, the largest key size of a widely-used encryption standard</li>
<li>Not including the policy files leads to many problems:

<ul>
<li><a href="https://stackoverflow.com/questions/6481627/java-security-illegal-key-size-or-default-parameters">Unexpected exceptions</a></li>
<li><a href="https://stackoverflow.com/questions/1179672/how-to-avoid-installing-unlimited-strength-jce-policy-files-when-deploying-an">Unsatisfying workarounds</a>:

<ul>
<li>Just install them</li>
<li>Use a different implementation</li>
<li>Use reflection that may violate the Java License Agreement</li>
</ul></li>
<li><a href="https://stackoverflow.com/questions/5239974/java-jce-unlimited-strength-encryption-security-policy-files">Breakage after JRE updates</a></li>
<li><a href="https://stackoverflow.com/questions/25320705/jce-unlimited-strength-installed-but-aes-256-is-not-supported">Confusion after installation</a></li>
<li><a href="https://stackoverflow.com/search?q=%5Bjce%5D+unlimited">And more!</a></li>
</ul></li>
<li>All this noise leads to broken and/or buggy programs</li>
</ul>

<h2>Question</h2>

<ul>
<li>Why are these not provided and treated like a black sheep?</li>
</ul>
