People are not proactive, they are reactive and sometimes plain negligent. There are still people and even people who are working in security that have not heard of Heartbleed and they don't even know what it is. Opportunities for the crackers for sure....