Comment by chews

it's fair to say they do and have for ages... it's not that hard to assume a well trusted TLS cert is under their control.