Also MITM? The comment you are replying to in no way implies that this is the only MITM.
Since they masquerade as example.com with an https certificate that your browser will trust: yes.
Since they masquerade as example.com with an https certificate that your browser will trust: yes.