Basically, yes. Kaspersky is a neat guy in a bad place.
But I would give the same raw deal to Kaspersky's competitors. No uploads! Uploads are spyware! External anti-virus has no place on NSA computers!
If your job is to develop NSA spyware, the last thing you need is to be running anti-virus software. Or stealing Office (for what that hairball is worth) via downloaded malware.
The real solution is to use a system that doesn't need anti-virus protection. And, if truly sensitive, is not connected to the internet.
The whole thing reminds me of the reimagined Battlestar Galactica on Showtime, where the commander refused to modernize the ship to connect all the computers.