Why is appending the key to a mesage and then hashing that insecure if the hash isn't weakly collision resistant?
Attacks of the MAC construction $\mathcal{H}(m\mathbin\|k)$ for common hashes $\mathcal{H}$?