I am quite confident that the NSA does not have a complete image of the encrypted data in my self-hosted Nextcloud instance. With IPFS they wouldn't even have to do anything, if they sometime in the future were able to break the encryption.
I looked at this briefly for a security module for my MSc and from what I vaguely recall they were tapping roughly half of all data going through AT&T on the West coast