It's also assuming that only government entities could afford to build a cluster that could crack this kind of encryption.

Criminal enterprises don't need to run mass surveillance, but they may well find it worth paying to crack encryption for very specific targets.

The criminals don't even need to build it. They can just repurpose a DDoS network...