> 7 years later, hardly any policy change has been implemented as a result of his leaks.

Maybe not government policy, but private companies have gotten serious about encryption to reduce the amount of passive surveilance. Private networks are no longer assumed to be private.