How many years did it take to get there? How many servers are still running apache?
> And, of course, eventually switching from openssl to libressl will become as easy as spending a couple minutes with a package manager.
Eventually, maybe. That's no reason not to audit openssl right now, that people cannot switch - especially the ones that use platforms that the OpenBSD team decided to remove support for.
