Right, don't attribute to malice what is adequately explained by incompetence. The problem is that when it's the NSA et. al, the spies, incompetence is treated as less likely than manipulation. I really don't know whether this is correct; I just know the underlying assumption of incompetence might not be warranted in every case.
There's often no need to look for more complicated explanations when simple incompetence will suffice. This felt like a bad, impulsive decision.