Because it comes preinstalled on everything sold in the country, you need to use it to access websites, and if you’re caught trying to bypass it there are penalties. You can’t “one weird trick” your way out of a repressive government.
Why would the citizens install the malicious certificate as it is? Because without it, they won't be able to browse the Internet
Do some handshake to the ISP from the browser or no internet for you. Make walled garden browser use cheaper like Zuckerberg does in Africa.
To be clear I am not advocating this.
That could be circumvented with a browser extension though.
in a modified browser? perhaps that extension is not able to be installed..