Just to be clear, the NSA issued an unequivocal statement saying they did not know about Heartbleed.

Google unequivocally did know about Heartbleed, but withheld the information — even from the government! — until they could fix their own systems.

Tell me again why I should be less concerned about Google than the US government?