I am quite inspired by the incredible self restraint and carefulness of the people who received the Snowden docs. They've been able to keep giving us bigger and bigger reveals at just the right rate to keep their topic constantly in the news. And also, keeping the spy agencies guessing about what might or might not be still to come.
It might not work, for changing anything, but I can't think of any strategy that would work better.
ssh+2FA to all your machines, anywhere, without opening firewall ports.