This is silly. Open platforms use TLS, too, and there's no epidemic of trivial failures of encryption; you can't just add root certs willy-nilly because crypto

This is silly. Open platforms use TLS, too, and there's no epidemic of trivial failures of encryption; you can't just add root certs willy-nilly because crypto engineers knew that was the most obvious attack vector. FB did this by paying folk to consensually MITM their own traffic, and frankly any system that wouldn't allow users to do that on their own devices is a bad one.