With the exception that MITM between cloudflare and the origin has been seen in the wild and documented and MITM on/in the heroku network has not.