How hard it would be silently push an update to redirect all google traffic through VPN. We have already seen them trying to get google search query and results. And why stop at Google basically they can do any website they want.
However, you are using a Microsoft client and/or a Microsoft OS to do this - and of course, if they want to, Edge or even Windows itself can report on the input and output of any operation you make, regardless of any network security. Similarly, WhatsApp or Signal or iMessage or Android/iOS could send a copy of the plain text of any messages you send or receive to home base despite them being E2E encrypted on the wire. You always have to trust the device and client software you are using to access the internet.
So, if you personally don't trust Microsoft not to snoop on your traffic with Google, using Edge or Windows is completely wrong.
It’s definitely not impossible, MITM attacks work for TLS and this is exactly how cloudflare work (it MITMs TLS sites by terminating the tunnel and recreating.). TLS is only secure if you have pinned certs.
Otherwise, TLS is completely impervious to MITM attacks as a protocol.
Of course, various implementations of TLS may also have exploitable vulnerabilities.
This is exactly my point. People are desperate for there to be no flaws in TLS, so much so they ignore MITM attacks.