> OpenSSL is a free software project, meaning that everyone smart enough to snark after the fact could and should have been providing patches

If you follow Valhalla, OpenBSD merged a number of patches which had been languishing in the OpenSSL tracker for months or years.