[mikevin]

Would certificate pinning also remove the first option? I wonder if we are moving to a system where inspecting your own traffic isn't a viable option anymore, am I missing a workaround?

[jcalvinowens]

If you control the machine you can always defeat pinning, given enough effort. But for an IoT device, yeah, we're already there.