You're probably right, but what about pre-existing kit that received an update that included the b0rked version of SSL and went EoL since? I haven't kept up on

You're probably right, but what about pre-existing kit that received an update that included the b0rked version of SSL and went EoL since? I haven't kept up on what version of FreeBSD is being used as the basis of JunOS nowadays but I would not be surprised to hear of EoL Juniper kit that included the flawed code. (I have no evidence that JunOS includes OpenSSL code but I assume that it does.)