"Some crypto primitives can be small and elegant, but to provide practical security they generally need extra layers on top of them," is what I understood. I'd compare it to simple textbook RSA vs. the whole ceremony of PKCS #1 padding. It fits into the broader theme that the simplest thing to implement is rarely the best thing to use.