If Blue Coat issues a certified for google.com, then its own intermediate certificate gets revoked by all browser vendors in a matter of days. They can use rogue certificates for targeted attacks, not for mass surveillance.