Let’s not be unduly pessimistic. Some basic rules continue to apply. By its nature, open-source software is always going to be a pretty solid guarantee against mass surveillance. If a lot of users are affected, the backdoor is going to be discovered and closed pretty quickly. That leaves the problem of individualized surveillance, where exploits are used against high-value targets. But these are by definition expensive. This fact constitutes a kind of protection for everybody else. That’s the way I see it.