That was just a person on dread spreading fud. I saw another post later that did a breakdown of everything that was changed in the code and there was no problems.
The state is too incompetent and lazy for that. That is only on TV shows. In reality they just wait until someone snitches or moves $10 million then they swoop in claiming they were "investigating" all along..
Unless we're talking different things here, my understanding was that a large enough entity could theoreticaly control a large number of haveno accounts and collect all the off-chain data. Not strictly a haveno issue.