I'm just waiting for someone to drop a real zero day on openssh or openvpn for before the real pants pooping starts.

openssl much more likely. And this will have a bigger impact

If you run openssh open to the public...