As a user of mitmproxy, I assure you it is not achieving MITM by exploiting any weakness of SSL. mitmproxy requires its certificate to be trusted by the target (i.e. installed in the root store) to silently intercept SSL'd traffic. Invalid certificate warnings will display otherwise. This is fully conformant to SSL's threat model.