Ask HN: Is HTTPS useless against NSA MitM?

Lately I've been thinking that HTTPS, while good for most MITM attacks, is basically nullified when using Cloudflare, Google, AWS or any load balancers that break the encryption in between the app and the user. I bet 100% that NSA has found a way to install their sniffer in between.

What can we do about it? I guess to mitigate these attacks, there's also custom encryption in the app itself if needed?