They've already more or less admitted that they have absolutely no control with these lists, and that any agency, for any reason, without any actual evidence can add someone to the watch lists.
Let's think this through for a minute... So you would rather that the list be made up of persons with known terrorism group allegiances, and that any and all supporting information also be cataloged in the same place so that the list is audit-ready to outline exactly who is a terrorist, why, and how we know that? Yeah fucking right. The list itself would be a roadmap for how the US finds and tracks terrorists. You're just going to have to unwad your panties on this one, you don't get to decide who the defense department targets since you are completely unqualified to do so and frankly, don't know shit about mitigating the risk of terrorism.
Apparently, the people in charge are also completely unqualified. By your logic, we should simply sit back until they've fingered everyone as a potential terrorist. Then there won't be anyone left to complain.
Fuck the apology. Put him in jail.
At this point there is no choice but to assume that when the CIA and NSA say they're in compliance with the law, they're bloody well lying.
When they're outright lying to the people who oversee them, they've become a criminal organization.
Going to jail would be the sincerest form of apology. At least then we'd know they're really sorry, although not necessarily for the correct reason.
The trouble with doing something right the first time is that nobody appreciates how difficult it was.