[iraklism]

If your threat model includes 3 letter agencies, the short answer is that you cannot.

[quantumhobbit]

Problem is that the 3-letter agencies tools get leaked and then are open for script Kidd to use. So you're threat model has a dristributive connection to the 3-letters no matter what.