I agree, provisionally. The NSA should play a variety of different roles (as it does!), and different parts of the organization should specialize in those roles. And some level of cyber-espionage is valid, though I think it's overemphasized.

But improving IT security is less sexy than destroying adversaries' nuclear capabilities, and its easier to sell the (decidedly mixed) value of the latter stories than e.g. improving capabilities to identify and monitor foreign attackers.