It does address the point. You can't get Google's private key from any cert authority. That's the point. If you compromise a cert authority, you can create fak

It does address the point. You can't get Google's private key from any cert authority. That's the point. If you compromise a cert authority, you can create fake certs to execute a man in the middle attack, but you can't passively decode encrypted traffic.