Yea, but then heartbleed was a thing for how long that no-one noticed?

The value of foss is so many people with a wide skill set can look at the same problematic code and dissect it.