They fucked with DES back in the day
Yep. I remember. IBM thought they had something new and BIG, and then came the NSA and just substituted some S-Boxes without comment. And boom, the key space got smaller.
The NSA has a dual job. They want to break encryption, but they also need to protect US secrets.
For them it is sufficient when they can happily read along.