if your threat model includes the NSA i don't think your choice of CDN is going to make a difference