I get their point, but just as it might be "foolish" to assume that software which was audited is no longer secure just because the developers have stopped work

I get their point, but just as it might be "foolish" to assume that software which was audited is no longer secure just because the developers have stopped working on it, it is also "foolish" to use cryptographic software that is not being worked on actively by experts. And since TrueCrypt is proprietary, people should not be using it anyway (not because you cannot read or modify the source code but because the license itself is "full of traps" according to the fedora-legal team[1])-- Linux's dm-crypt can decrypt TrueCrypt volumes (though it's read-only from memory) if you need legacy support. [1]: https://lists.freedesktop.org/archives/distributions/2008-October/000276.html https://lists.freedesktop.org/archives/distributions/2008-Oc...