Are not all the ciphers breakable post collection anyways? Is it fair to say that this is effectively for the purpose of blanket non-targeted surveillance? Where by having the keys in their possession it gives them a shortcut for bulk analysis and saving CPU time that would otherwise be spent breaking encryption.
And a cpu-processing-savings advantage justified cyber-attacking a foreign civilian corporation?