Perhaps they have moved on
Once you have pwned the compilers and other elements of the toolchains that build the toolchains that build the toolchains that ....
To get a clean from start you would have to wire up the processor from transistors, design and build your chip fabricators, code your compilers and bootstrap yourself into the modern age.
Not many people or organisations have the patience, ability or resources to go through such a process.
One iteration of Linux from Scratch was enough for me.
There is no way to fully trust that any technology today has not been pwned to some degree or another.
The only defense is to get as many different individuals and groups investigating and testing in as many different ways as possible.
It is probable that the NSA's largess is not something that is a significant threat to the NSA itself.
It will be though, something that can increase the exposure of their counterpart's efforts along with those of non-state threat sources.
