He is right, after all, it is just a bug, like so many others some of them we are not aware off, and it did not break internet. It just may leak information, if and only if you really know your job in coding and are very good. People that could be hired by organization with the money and the need for it? Nooo.. You have to be paranoid to think so. And ... then throwing the stone at openssl would be like distrusting all softwares: they all have bugs. By the way, I never saw a software with a legal liability clause for bus for a software... so ... if a user have a problem or money loss caused by softwares, then he is the responsible for his choices.