Sorry, I should have clarified that it negates HTTPS in the context of the NSA (and presumably other government actors around the world), still great protection

Sorry, I should have clarified that it negates HTTPS in the context of the NSA (and presumably other government actors around the world), still great protection from getting your facebook session hijacked over wifi. What about protection from the average NSA sysadmin or analyst with slightly less moral fiber than Edward Snowden? (or gambling debt, or a mental disease, or an obsession with your significant other etc.)