Oh it's definitely security theater, and it also wastes a ton of time as you describe, figuring out how to add certs or use a proxy in various pieces of softwar

Oh it's definitely security theater, and it also wastes a ton of time as you describe, figuring out how to add certs or use a proxy in various pieces of software. Back when I had a corporate job, I think at least 50% of my value to the company was that I knew how to get around Zscaler when necessary. Nothing particularly clever, just secretly using a proxy on some random server in our data center that happened to have unfiltered access to the Internet - which seemed like more of a potential security issue than anything Zscaler solved, but oh well.