having lots of apps though is that it makes it harder for the NSA to subvert the apps or developers
The NSA has had several 10s of $B a year, every year, basically since World War II. This is far greater than the entire public data security sector.
By now they likely have sophisticated internal tools for reversing and analysis. I doubt that it would take long at all for them to develop an exploit for an buggy amateur crypto app. They probably have plenty of new hires and contractors looking for trivial projects to practice on.
Don't get into a war of resource attrition with the most well-funded military on the planet.
The NSA has had several 10s of $B a year, every year, basically since World War II. This is far greater than the entire public data security sector.
By now they likely have sophisticated internal tools for reversing and analysis. I doubt that it would take long at all for them to develop an exploit for an buggy amateur crypto app. They probably have plenty of new hires and contractors looking for trivial projects to practice on.
Don't get into a war of resource attrition with the most well-funded military on the planet.