is this something that an org like NSA could use to get into iPhones that are locked and Apple is refusing to unlock?

If that is the case and with the track record of our data security agencies (USA), they probably found it as they do some other zero days and accidentally leaked it.