OpenSSL has way too many options that reduce security. A lot of that legacy code needs to be removed outright. Not turned off by some flag, not controlled by some environment variable, removed.
(And then, when Rust settles down, OpenSSL needs to be rewritten in Rust, as cleanly as possible.)
(And then, when Rust settles down, OpenSSL needs to be rewritten in Rust, as cleanly as possible.)