When a crypto primitive breaks (like MD5 did), we're kinda screwed anyway.

On the other hand, bug-free implementations are possible. We have the tools to audit the hell out of them. That kind of pedestrian can be made immune to buses, so to speak.