First, I don't see any controversy in that opinion. I'd go even farther and say it would be very surprising if governments don't have certificate minting abilit

First, I don't see any controversy in that opinion. I'd go even farther and say it would be very surprising if governments don't have certificate minting abilities to MITM SSL connections. The only thing that holds them back (even still) is probably risk of exposure. They don't do this except on very high-value targets, at the risk of burning the CA they control.