I think we agree then: embarrassed, yes. But outraged, no. My point is that there is a qualitative difference between untargeted domestic mass surveillance and targeted foreign surveillance. The former is a known threat to democracy; the latter is distasteful and it would be better not to exist, but it's part of the international landscape since forever.
I believe outrage is appropriate and that the NSA and the USA should be pretty deeply embarassed (and GCHQ and the UK).
Foreign surveillance can be a threat (blackmail) to foreign democracies. Breaking into computer systems is also criminal in most jurisdictions. A government caught committing crimes in another country without very good reason should expect severe diplomatic and even economic sanctions, involved staff and those giving the orders should expect arrest if they visit the country spied on (those computer hacking in EU could expect arrest anywhere in Europe under the European arrest warrant). I'm not sure it would be wise for NSA bosses to holiday in Europe (without the protection of diplomatic immunity).