That would be TLS traffic at most (Good luck adding those certificates to curl, MUAs, etc. for example). That's far from being the only encryption system avail

That would be TLS traffic at most (Good luck adding those certificates to curl, MUAs, etc. for example). That's far from being the only encryption system available - SSH doesn't even have a concept of "root certificate" to MITM with.