Waste our time reading through the author's wild generalizations, and we see
"
Responding to Soltani, CDT senior staff technologist Joseph Lorenzo Hall expressed skepticism that the NSA can break all VPN encryption. But Soltani contends the NSA at least has the capability to crack weak cipher implementations on Windows machines common in the Middle East,..."
"NSA Surveillance Can Penetrate VPNs"
Thomas Claburn
InformationWeek
More accurate information can be found in discussions and archives for the development of secure, open-source systems.
For further reading of an example of use of the FUD tactic, read about the OpenBSD ipsec back door hoax. But while looking for information on that, avoid the publications of vague generalizations that most corporate/government office managers have preferred.