At what point does using TLS become malpractice? At what point does any software that links to OpenSSL become immediately suspect? And TLS as deployed isn't se

At what point does using TLS become malpractice? At what point does any software that links to OpenSSL become immediately suspect? And TLS as deployed isn't secure even when it works whenever you don't trust the certificate authorities. Which is always. Yes, I get that these are mega standards/libraries with a gazillion knobs, some of which are secure. But maybe kitchen sink crypto isn't the way to go? When will we say enough is enough and do something about it? For my part, I switched to using NaCl with public key pinning a few years ago and haven't looked back. /sigh