All traffic can be logged. And if it's not logged by them we have sadly learned our governments at logging such as well.

There is nothing new here except that we have learned that even encryption has been compromised as we read and other articles.

Best practice is to not abuse your connection.