I mean, we see the articles posted here on hackernews daily about insecure information security, corporate malfeasance, and stories like this where law enforcement steps over legal boundaries.

I dont think its an incredible position to hold that intelligence agencies exploit all 3 of those situations, including any number of undisclosed zero-days, in order to surveil broad swaths of the population.