They have done a shitty job at it. Snowden revealed much but non of the real horror stories have turned out to be true.

Modern standards like SHA3 are designed far better and in a way that make it way harder for anybody to build in a backdoor.

This is one of the few areas we dont have to worry to much about.

What we need to worry about is addoption of good defaults by the large majority.