What phone isn't? Is even cyanogenmod safe from the NSA?
Plus, the CyanogenMod team is now working on encrypted end-to-end messaging that is built-in:
End-to-end encrypted messaging is a good sign, but it doesn't matter how "community made" your endpoints are - the NSA has the network.
I agree about the voice calling, though, which is why I'd like them to use RedPhone as the default dial app, too, so at least you can have encrypted voice conversations when connected to the Internet.