The NSA bit is especially interesting. I've thought about it quite a bit and I think that a lot of "the NSA can and will break everything" is often hyperbolic intentionally to discourage trust in encryption. It's the panopticon tower that never had a guard. They're still a strong theoretical adversary that should be considered, but I don't they are nearly as efficacious as advertised.