Encryption still best way to protect data -- despite NSA