Security researcher blames media hype for admins adding the Heartbleed flaw to previously unaffected servers.