Not only MITM traffic, but also run arbitrary software since it could also govern code signing.