With all the trusted root CAs pre-installed into most browsers, a governmnent that wanted to could easily take over their local CA, have a cert issued to them f

With all the trusted root CAs pre-installed into most browsers, a governmnent that wanted to could easily take over their local CA, have a cert issued to them for Facebook, Twitter, etc. and man-in-the-middle all your SSL-secured connections as much as they want.