<i>&gt; I&#x27;m not defending or apologizing for OpenSSL (or any project), but your rationale isn&#x27;t consistent, seemingly only trying to evoke an emotional response.</i><p>The GP is pointing out that LibreSSL has avoided the 5 vulnerabilities that OpenSSL marked sev:high since the fork. There isn&#x27;t any inconsistency about that, it&#x27;s a pure apples-with-apples comparison.<p><i>&gt; It&#x27;s not clear to me (as a consumer) that any project has a huge leg-up over another</i><p>LibreSSL has avoided almost half of the OpenSSL vulnerabilities found since the work. What more do you want?