that's true, but it's the highest-profile encryption drama I could think of - a more appropriate example would probably be the onslaught of companies which are storing passwords in plaintext or simple MD5 hashes.
Good example of a flaw mitigated by NaCL: the CBC padding oracle attack.
† Caveat: no I don't