Did you read the article? He particularly calls out applications which use HTTP and/or are vulnerable to MITM attacks. They're not really "sexy" bugs to fix and

Did you read the article? He particularly calls out applications which use HTTP and/or are vulnerable to MITM attacks. They're not really "sexy" bugs to fix and many older open source projects are languishing, since it's much more fun to create new software than maintain old software written by someone else.