Heh.
I just checked the w3c cid repository and no one else bothered to report the whole "base58 is nightmarishly difficult to implement without side-channels" thing upstream, despite the FEP-521a folks insisting it's necessary and I said "yeah I don't want to bother helping blockchainiacs".
I can't tell if this is laziness or everyone else looked at it and went, "Yeah, blockchain is pretty gross ngl..." and did something enjoyable instead.