I work for a school. My traffic is not MITM'd, but the kids' traffic is, because we don't want them using their school-issued laptops to play games or go shopping, and you can't adequately block stuff if it's all encrypted.
I can't imagine the headache as a school when parents come yelling "why did you allow my child on site XXX?!"
Whitelists instead of blacklists?