Looks like Instagram at least does do TLS cert pinning, but it looks like there are patched binaries that disable it.
https://github.com/Eltion/Instagram-SSL-Pinning-Bypass