One could make a case that the use of sha256 would drive down the cost of comodity ASICs, enabling a well resourced attacker to use mining hardware 'off-label' to find sha256 hash collisions. Same goes for scrypt, with the adoption of its use as a password store.