I meant perhaps NSA agents are trained in social engineering too. Or it may not have been the NSA, but FBI or CIA or even Military Intelligence too, pretending to be NSA.
I meant it may have been a real NSA agent, acting on actual orders, but that he may have lied to get access to source code. If so he wouldn't need to do any MitM attack.