There are much more reliable ways to intercept traffic than messing with the root certificates. I believe corellium has a more solid strategy where they modify

There are much more reliable ways to intercept traffic than messing with the root certificates. I believe corellium has a more solid strategy where they modify the TLS library to accept certs signed from their proxy and then the certificate from the origin server is passed through as an extension on the proxy certificate.