That would apply to any major cryptography protocol or library, right? I (and I assume most openssl devs) for example would be pretty sure that openssl is used

That would apply to any major cryptography protocol or library, right? I (and I assume most openssl devs) for example would be pretty sure that openssl is used in "serious crime" in some way. Same goes for almost any other privacy-oriented thing like TOR, signal, etc.