The other scenario is passive listening on the backbone, and working from the captured data. Nowadays everyone uses SSL, so they would need to decrypt it. Let's suppose that they have no magic, and they play by the same rules as us. In that case the only feasible way is somehow obtaining the private keys of the companies and using that to decrypt the traffic, however for example in google's case the private keys won't do any good, because (if I understand everything correctly) Google uses the Diffie-Hellman key exchange algorithm for its SSL connections which makes passive mitm impossible: https://news.ycombinator.com/item?id=5843223
Active mitm is very unlikely, because that could be detected.
And I have ran out of possible scenarios. The only remaining scenario is that all this is made up for some reason. My question is: What could be that reason?