Google is not getting any data when you connect to a GCP VM through TLS. Or did I miss another huge PRISM-level scandal? Same for Azure and AWS. But if you block those no wonder a huge part of the internet is gone.
[Edit: apparently this is more encrypted than I was thinking, so the next bit is probably wrong.] They could potentially look inside the VM to look at the specific data on the other side of TLS.
Which is quite similar to meta data that's collected on phone calls, such data is regularly the basis for governments killing people [0]
[0] https://www.justsecurity.org/10311/michael-hayden-kill-peopl...