I think that the CIA probably uses their own nodes except for the exit. They still get cover traffic from other people using their nodes, and then they don't need to worry about China getting their entry guards.