90 percent of Tor keys can be broken by NSA: what does it mean?

I know of TOR; compramised. VPNs; blocked in many UK systems (and soon all free ones). Using crypto on communications; which requires the other end to be willing to do the same (and is less relevant given my understanding that GCHQ won’t go into the body of the email without a warrant). Encrypting my drives; if the UK ever look at my drives, legally, and request my password I either comply or face 6 months. Encrypting my cloud stored documents; not being able to directly use them from the cloud or share them with others unless I run them through a decrypt or the others will use crypto. Using zero knowledge search engines; not something I have a problem with, but when my activity con be monitored does this do anything? Using incognito mode; protects me from tracking cookies (though this is not definite) and nothing else. So I know of 3 usable techniques. 2 do nothing about surveillance and only shield me from corporations and 1 only works if my network of contacts are willing to use it. Hence asking, my knowledge on these tools is limited, what I do know is about how they are being labelled as useless. So what is there?