It makes very little difference where a domain is purchased from or where its top-level domain servers are located. All DNS does, is resolve a name into an IP address and vice versa. OK, you do have to trust that if you tell Google to resolve wan.gle to 123.45.6.78, it actually does that, rather than resolve to some other address running an imitation service or "wrapping" yours. But there's no mechanism to hide any incorrect resolving, so that's unlikely. There's far more mileage in subverted Cisco (and other) switches.
Once the name is resolved to an IP address, the server with that address can be anywhere on the internet: the US, the EU, Russia, Tuvalu, Antarctica .... and the NSA will probably know how to get into it wherever it might be!