“Exposure to remote code execution is not expected on any platforms.”
OpenSSL pre-announced a CRITICAL fix a week early and the entire industry braced for Heartbleed 2. On release day it got downgraded to HIGH. The bug lives in punycode decoding added in 3.0.0, so the 1.1.1 installs most people actually run are fine. Crying wolf has a cost. The next time OpenSSL says critical, fewer people will drop everything.