notacryptwizard

I think that a reasonable person would consider {Apple, Google, Lavabit, ...} receiving a National Security Letter coercion, and therefore not "complicit".

"Complicit" would be Verizon or AT&T, who to this day still sell phone call metadata to the NSA.

vulnerable to any hacker who knows how to use the vulnerability

I must have missed this part of the news cycle. Can you explain how anyone other than the NSA can take advantage of Dual EC_DRBG? Did P and Q or whatever it was get leaked as well?