The right question would be "Not if the website uses client certificates though?". As far as I know, TLS connections using client certificates can't be proxied,

The right question would be "Not if the website uses client certificates though?". As far as I know, TLS connections using client certificates can't be proxied, since the MITM proxy would need to have the client certificate's private key.