So, if I'm understanding you correctly, everyone should be wary of advice such as "don't use service accounts with root permissions", "segment your network", and "regularly scan your assets for vulnerabilities" because of a clandestine program dating back to 2006 which was designed to weaken an encryption standard?

Should all my service accounts run as root because NSA thinks that's a bad idea?

No, you’re not understanding me correctly.

What I am saying is that when taking advice from a proven malicious actor, it’s important scrutinize the advice more carefully than one would usually do.

Osama bin Laden could have said “eat your vegetables to be healthy” and that is obviously reasonable advice but it’s also largely useless because we already know it is true. It’s the stuff that isn’t obviously already correct that we should take extra care to verify.