I've always found the size and obscurity of the pre installed root certificates list to be suspicious as any one of them can eavesdrop on any TLS communication.

I've always found the size and obscurity of the pre installed root certificates list to be suspicious as any one of them can eavesdrop on any TLS communication. I've always assumed that every nation has atleast one under their control to allow MITMing .