Clearly the smart move is to leave, and become a service provider. Start a security focused business, start something the NSA themselves will have trouble getting into, and you provide incentive for them to buy their way in when your security focus attracts someone they find interesting
I wasn't asking about legitimate spin-offs, I was wondering how many of them are pure crooks (;-))
When Sun still existed, it wasn't at all unexpected for a couple of people to leave to start their own business, work on something on their own nickel that Sun wasn't going to fund, and see if they'd get bought.
The Sun very-very-multithreaded chips came out of two hardware designers thinking that there was a better way to go fast than "this chip is so hot it glows in the dark". They got lots of parallel threads almost immediately, whereupon Sun bought them! They eventually got faster single-threaded performance too, all out if breaking up the function units very differently.
All large organizations suffer from this phenomenon, whether they're public or private. All large organizations suffer from crooks walking out with thumb-drives, too...