A few minutes' thought doesn't turn up a counterexample, so I concede the point. I still wouldn't bet on it, though, as we haven't had a lifetime's experience

A few minutes' thought doesn't turn up a counterexample, so I concede the point. I still wouldn't bet on it, though, as we haven't had a lifetime's experience with such widespread use of relatively homogeneous software. The failure of Enigma wasn't worldwide, but for those who used it, it was a security calamity. If anything, the limited message I'll take away from this is that defense in depth is good. It's only the web's reliance upon OpenSSL that makes this particular bug so bad.