I don't think he had more technical capability than a typical SharePoint administrator at the time of his leaks. Setting up a VPN is pretty much sysadmin work. Digital Ocean had excellent guides on setting up OpenVPN and IPSec tunnels on CentOS in 2012.
SharePoint administration is credible tech work, it's just unrelated to programming and crypto.
He has had time to learn about any subject he wants to since. He may very well be a privacy or crypto expert now. If he wants to become an authority on any of that knowledge, he'll need to write about it with justification. Otherwise, why would anyone take him at face value?