This works only if you're on a company-controlled device. If you're on a device they do not control, you won't have their root cert installed and this MITM att

This works only if you're on a company-controlled device. If you're on a device they do not control, you won't have their root cert installed and this MITM attack is infeasible. If you're using a company-controlled device, you should of course assume they can see all of your network activity. They could easily be capturing all of your activity on the device itself without any MITM attack.