My university installed a root CA as part of the signup process for WiFi access. Three of them in fact.

Yeah it would. So browers will either get that big red warning or the user can be asked/required to install the certificate to be on the network.

It's not a technical limitation but a moral one.