[8note]

I'd assume apple can be required to relay any customer's traffic's into by the government.

[gomjabbar]

Only the ingress proxy is controlled by apple. The egress proxy is required to decrypt the URLs.