Ask HN: What appalling security practices are you forced to use in China?

For example, inside an AliCloud VPC you are required to use unencrypted traffic. Another example: one of the Chinese Android app stores (360) requires you not to sign the APK file of your app, so that they can sign it for you (and potentially introduce arbitrary changes).