It's my network with my assets and my data. Only I decide what is valid wrt to TLS on my network. The number of applications that purport to service a particula

It's my network with my assets and my data. Only I decide what is valid wrt to TLS on my network. The number of applications that purport to service a particular purpose but then proceed to exfiltrate substantial amounts of data that is not even tenuously related to the purpose of the application has destroyed any good will on my part. On my network there are an order of magnitude more valid TLS MITMs happening than there are valid non-MITMed TLS connections.