Then they'd start pinning certs and hiding keys inside the obfuscated binary to make traffic inspection harder?

And if an open source tool would start to use those keys, their CI could just detect this automatically and change the keys and the obfuscation method. Probably quite doable with LLMs..