Respectfully, that's not true. Secret programs can still be judged on their inputs and outputs: eg "we spent $50B and averted 17 attacks, saving potentially 15,000 lives and $500B in economic damage." What possible information can that give an adversary?
NSA is a thankless organization. You don't know all the things they've done well, and they get blamed whenever anything bad happens.
> We had 5 sacks, 3 interceptions, and limited the opposing offense to 200yards gained.
Is obviously better than
> We had 0 sacks, 0 interceptions, and the opposing offense took 400 yards.
Even if in both games the opposing offense scored the same number of points.
If we as a populous were good coaches/managers, we'd be using the players to protect our house, and alert us to better ways to secure it.
The average operation cost of 17 successfully averted attacks is $2.94B.
More to the point of holding secret organizations accountable, though, is the fact that you do not know if that is information or misinformation.
As for the needle in a haystack point. Bill Binney architected a system which was targeted. The NSA rejected it...