With commit 12099eac1b161d364be923451d27d7d739d0f14d, nothing is using openssl-1.0 except for the Rust bootstrap.
If I understand correctly, the plan is to "upgrade" that bootstrap path, and eventually we won't need a package of openssl-1.0 at all. I'm marking this bug as done.
