That would be TLS traffic at most (Good luck adding those certificates to curl, MUAs, etc. for example).

That's far from being the only encryption system available - SSH doesn't even have a concept of "root certificate" to MITM with.