I'd argue that it doesn't give ample warning. I've seen a number of corporate networks where a MITM trusted root cert is installed on machines via an AD policy

I'd argue that it doesn't give ample warning. I've seen a number of corporate networks where a MITM trusted root cert is installed on machines via an AD policy and the end users have no clue that their IT department can see things like their banking passwords. Unless you examine the cert by hand or connect a device without the cert to the network, you would have no idea this is going on.