I'm going to have to go ahead and sort of disagree with you. A security library, specifically doing crypto, that is installed/embedded/used everywhere that triv

I'm going to have to go ahead and sort of disagree with you. A security library, specifically doing crypto, that is installed/embedded/used everywhere that trivially leaks plaintext data remotely to anyone who comes knocking (including passwords, keys, CC numbers, etc) is a compete failure. Sure, it could hand out shells into a remote system, or hell it could launch a bunch of nuclear rockets as well...that would be very bad. But you seem to miss the point that perhaps someone's password to their shell (or maybe a nuclear launch code) is going over the wire and is intercepted...by a hostile government agency, or a 13 year old playing with a python script. There are endless, devastating scenarios one can think up caused by such a critical bug in the very fabric of the secure communication of the internet. This is a pretty big deal.