I don't recall the NSA attempting to weaponize my personal PC when I browsed a website using malware javascript served via a commercial analytics network to attack an open source project the way the Chinese government did. Comparing that to a tool developed by a random nefarious actor using an exploit the NSA had on file is just the tiniest bit of a stretch.