I won't discuss the fact that 12 years of surveillance have led to no results on stopping any terrorist plots, as the NSA has already admitted, but the NSA has actually made cyberattacks more likely because they are undermining the security of everything, including US infrastructure.
As Schneier says, it's not a question of whether we allow the NSA to spy on everyone or not. It's a question of whether we allow every attacker to spy or attack our networks - or we try to make everything more secure by default.
So when president Obama implies that NSA should keep hoarding their vulnerabilities into systems, he's choosing the former, rather than the latter. He's making cyberattacks more likely, not less. The way you defend against cyberattacks is by increasing security, not by increasing your offense capabilities.
If they really cared about the security of US infrastructure, they'd divulge the vulnerabilities they found or bought from the black market that exploit the security of these systems, so those systems can be fixed, and no one else can exploit them with these exploits. Instead they keep them for themselves so they can exploit them. That's not just wrong. It's incredibly dangerous and reckless, especially from an agency that supposedly wants to "protect us".