But let's not forget the NSA's own self-inflicted wounds as well. Let's see, here's what I remember:
* mission creep
* overreach
* LOVEINT
* massive collection of bulk intelligence with dubious justifications
* withholding information about 0 days it wanted to stockpile for its own use
* misleading technical committees so as to weaken encryption and security related standards
* introducing flawed security protocols
* paying money to security companies (RSA) to introduce weaknesses
* (thus with the above four items) actively sabotaging its own mission of helping to secure our nation's systems
* allowing its documents to be leaked en masse
* allowing possibly its most powerful and dangerous (though we don't know) sets of tools to be leaked as well.
Did I forget anything?