How is that any different than an employer forcing their laptops provided to employees through a VPN (where the user is subject to inspection&#x2F;blacklist&#x2F;whitelist&#x2F;etc) all the time? In both situations you have a machine provided to someone for a specific purpose (business&#x2F;education) that likely describes extremely particular acceptable use cases. MITM traffic on whatever network seems like a valid way to enforce that. Doing your banking on your own machine.