[sroussey]

They already have their own CA in browsers, so they can easily MITM. That’s why mobile apps will use certificate pinning to verify their server