> 1. it was not an NSA operation, it was done by a hacker.

Just like the NPR is not financed by the US government, but by NGOs.