[matchu]

Certificate pinning does prevent an important class of MitM attacks, though.

I think some applications use certificate pinning when validating a certificate provided by a default certificate authority, but, if you manually install a root certificate onto your device, the app will accept the override. That's one possible middle ground.

[kuschku]

Android Nougat disabled that — now it will not accept user-added CAs anymore, anywhere, ever.