Then those organizations using MITM boxes will install a patch or special modified browser on their members' computers instead of installing a certificate. What

Then those organizations using MITM boxes will install a patch or special modified browser on their members' computers instead of installing a certificate. What's the difference? They still control the computer and can bypass whatever security it has.