SHA-1 doesn't have an NSA backdoor. It's just insecure.
There's a good chance SHA-256 remains secure for the rest of our lives. We have gotten better at cryptography, and SHA-256 has lasted much longer than SHA-1 did.