Should TLS MITM support come with guardrails to discourage abuse and exploitation?

[brandonpayton]

We support a TLS MITM in the browser in order to relay native HTTP requests to the browser's Fetch API. Some questions:

• What dangers are there for abuse?
• How can we discourage abuse?
• How can we design the default path so users are not easily exploitable by default?