Defacing OpenSSL's website might be low-value, but backdooring OpenSSL code (trusting-trust style!) would be about as high-value a target as I could imagine.
In other words, who's to say that the NSA (/GHCQ,etc) was the same party that ultimately defaced the website?