The xz compromise was not "at openSSH", and worked very differently.