You only need to transmit the key once, and the timeframe for that is anytime between installation and the first request of the NSA. That is a lot of regular p

You only need to transmit the key once, and the timeframe for that is anytime between installation and the first request of the NSA. That is a lot of regular ping message, directory listing, software update that can be overlooked in that period. As another commenter pointed out that you voluntarily give the password if you use the web UI. Probably the same if you use a mobile client. So there is build-in room for honest mistake in their service definition. So basically, you still need to trust a third party, and looking at the recent news, they are really out there to get you. Another thing that nobody is talking about and at the heart of internet. What about all those SSL certificates ?