Looks like the infosec cold war is in full swing.
All secrets eventually leak. All secrets. No exceptions. Not even nation-state players with unlimited budgets can prevent leaks. This is reality.
What's a hacker (in the original sense: programmer, not cybercreep) to do?
Our task as custodians of secrets for our end-users is to reduce the attack surfaces on our systems, slow down those leaks and mitigate the effects of leaks when they happen. We must do these things to the best of our ability. We must do them whether we rig systems for large organizations or for our grandmothers.
Who's trustworthy?
Apple? Probably. They're pushing security as a major component of their brand.
AWS? Possibly. They have a lot to lose if they're compromised.
Microsoft? Possibly. They too have a lot to lose.
Seventeen well-placed but unnamed sources in the US security apparatus, babbling to journalists? Possibly.
Journalists? Their trustworthiness is eroding.
Cryptographers Whit Diffie, Martin Hellman, Ralph Merkle, Bruce Scheier, Ron Rivest and colleagues? Likely.
Motherboard vendors? Probably not.
Router / switch / firewall vendors? Probably not.
Nation-states? No. (They could change this by abolishing "security by obscurity" in their work, but that would require major changes in mindset.)