Without in any way condoning the move, there is a lot of protection you can add with decrypted traffic. Malware analysis, DLP, etc. But obviously the security

Without in any way condoning the move, there is a lot of protection you can add with decrypted traffic. Malware analysis, DLP, etc. But obviously the security as a whole has to consider the increased risk due to the centralized cert, disregarding entirely the fact that you're trusting a totalitarian government with all of your secrets...