God, the number of techbros here who are confident in their ability to resist targeted attacks from sophisticated national intelligence agencies is terrifying, but also explains a lot about why Silicon Valley is the way it is.
Your (and my) ability to resist a state-level actor is inversely proportional to the extent to which they notice you. If you become the target of their focused attention - you're hosed.
So - if your adversary is the state, any state - you need to be invisible. Or at least entirely inconspicuous and non-threatening.
Fortunately, in my day-to-day I'm dealing with boring "please don't click that link in the email / no your terraform doesn't need admin" types of threats, ie. Human stupidity.