
As if a 3 letter U.S insecurity agency isn't already studying the code for vulnerabilities
I'd suspect all the worlds TLA/FLA/xLAs are. Even the kiwi ones, though it's probably better just to refer to them as LA LA LAnd...
I'd also suspect a great many 'criminal" and "terrorist" organisations are studying it for things they can (ab)use.
Problem is, it's the best we have for now (unless that other thing (I2P?) is better), and the more time goes on the more bugs get found and removed (although changing the underlying protocols may not be a great idea - I don't mean the PKI but other significant changes).
Fun times ahead...