Who believes anything the NSA says anymore?
I honestly believe the only way forward is to encrypt ALL of our communications from here on. HTTP, SMS, email, voice, everything! Give them so much encrypted data they don't know where to look and what to decrypt. Even with their awesome hardware and unknown capabilities, surely it's an easy task to drown them in exabytes of encrypted data.
As a developer, I've taken the first step (shameless plug coming up). Awaaz
is a Android plugin that automatically takes over any outgoing calls, and assuming the other party also has it installed, it will establish a direct P2P connection over the Internet and encrypt all communications using 256-bit AES. The symmetric key is exchanged using 2048-bit RSA, and new public and private keys are generated every single time, thus theoretically making decryption impossible. I encourage everyone to use it!