> People barely realized it until "Heartbleed" CVE

at which point they proceeded to shit on those devs for being so awful at maintaining a critical project. It was nasty and unwarranted.