Making your own protocols means vulnerabilities are more likely. Better to use one that’s been tested and audited (unless it’s following something like this EU thing of course)