Size matters though, I don't think the NSA is going to go after you SaaS because some small company in the US is a competitor. When you're at the level that it

Size matters though, I don't think the NSA is going to go after you SaaS because some small company in the US is a competitor. When you're at the level that it becomes a concern, you should be paranoid in any case, not just because you might get targeted, but because industrial espionage doesn't require the NSA. When serious money is involved, every competitor can hire a bunch of guys who are, for all intents and purposes, in the same league. They may not have the latest & greatest 0day, but the NSA isn't going to burn that on most industrial espionage cases either (especially not in Western countries, where they can just talk to their intelligence counterparts and expect cooperation).