In contrast, the cryptanalyst might be able to actually demonstrate weakness, but only by dint of massive effort which may not succeed, and will not be compensated even if it does.
Most criticisms will be extrapolations, possibly based on experience, and also possibly wrong.