Not in the strict sense if it's state-mandated MITM (you are forced to install a specific root certificate to legally connect to the internet). But also in the

Not in the strict sense if it's state-mandated MITM (you are forced to install a specific root certificate to legally connect to the internet). But also in the other case, not all is lost: Not every malware can (or even tries to) defend itself against any antivirus software in existence. The machine might be compromised, but being able to retrieve the correct upadate for the hypothetically unaffected malware scanner can still give you the signal that your machine is infected and you should reinstall it.