The attack surface for shellshock is insanely large, and it's crazy to leave bash unpatched even if one or two currently-known vectors happen to not currently be known to be exploitable. People will be finding ways to tickle it for years to come.

Incorrect. OS X does not use bash scripts for DHCP client tasks and was demonstrated to NOT be affected.

The DHCP vector was demonstrated to be an issue with various Linux distributions.

That's not applicable here. Even NetworkManager on Linux isn't susceptible to this hack. dhclient and dnsmasq can apparently be shocked on unpatched Linux, though.