None of the things you said relate to the government having raw access to the plaintext before TLS is applied. Given the parties involved, it seems obvious tha

None of the things you said relate to the government having raw access to the plaintext before TLS is applied. Given the parties involved, it seems obvious that this is just a second, more efficient GFW that runs on Baidu's servers instead of at the border.