SHA3 and Blake2* use different constructions that don't have these flaws, thus they don't require HMACs for their needs.