What tool to use is a decision that developers and companies have to make for themselves. I can't make it for them, so I usually don't try.

Exception: Don't use mcrypt. It's abandonware.