FWIW I'm not trying to say that SHA256 is broken by anyone. I personally believe it may never be broken. I'm merely saying it's not mathematically proven to be as robust as we assume it is, but our assumption is fine for now for all practical purposes.