Hi, sicofante, thanks for your comment! You're right that this article emphasizes the issue of NSA spying on American citizens. The reason for that is there are laws in place saying that NSA should not spy on "U.S. persons." The laws around non-U.S. persons are a lot more wide-open, unfortunately, because international espionage is loosely policed by the U.N. so the U.S. has a lot more leeway to act. I did not mean to imply in the article that it's "OK" for the U.S. to spy on any one else in the world. If it came off that way, then I apologize.
Your second point about how encryption is only attention-grabbing while a few are doing it is also absolutely true! The problem is training people to know what encryption is, how it works and how to implement it for their personal data. Something like PGP, for example, only works if both the sender and receiver of a message are using PGP to encrypt/decrypt messages. I don't think that's the corporate sector's job, if that's what you mean by "industry." It has to come from education and personal volition. We've done articles on how to encrypt data before and it's certainly going to be a continuing area of focus in the future.