More-specific investigations to uncover actual threats, real court oversight, and making sure that protections written into law are enforced during data collection.
If GCHQ and the NSA were actually dedicated to securing our networks that would be a start, e.g. helping businesses and individuals migrate to SELinux or something.