Why not both? Those who would violate our rights are fighting this war on multiple fronts. F/OSS is an effective tool for defending against government hackers

Why not both? Those who would violate our rights are fighting this war on multiple fronts. F/OSS is an effective tool for defending against government hackers for some attack vectors, but aren't a panacea. There are a number of firmware and hardware attack vectors that F/OSS can't defend against currently. And at best, F/OSS only protects those who use it and use it correctly and end-to-end. Human rights don't just apply to people who think they need them. Facebook/GMail/Baidu users still have a right to privacy even though they've chosen to use services run by companies whose business models inherently involve violating their rights. Users who think they are anonymous on Reddit/Imgur still have a right to privacy even though they don't understand that they are being tracked through ads. I know that this is somewhat of a losing war, but we've won battles here and there. Remember that if it weren't for the legal side of this fight, many of the technical solutions we which are widely available today would be classified as weapons and therefore unavailable to many people.