Wild speculation, but what about TLS key misappropriation? In other words, NSA has access not through official channels but somehow got private keys through hook and crook?

(I have to admit I do not fully understand PFS and the implications here.)