What’s not being said here is that someone, somewhere, told the NSA where to look. There’s no way they knew what this ‘code’ meant absent someone telling them about it.
In short, they made the case to surveil this email account, but they still have not made a case for spying on EVERY email account.
(And everyone be polite and wave at our guests from the Federal Government who are monitoring FR today!)