Still, I do believe that ultimately trust has been broken. Even if no blackhat used the exploit even once, since it's in the Orchard pool, we can't know for certain without a backdoor. If such a backdoor exists, then obviously trust is broken there too, so there's no way the team would acknowledge that they have a backdoor, even if they want to prove the exploit wasn't ever used.