SSL Certificates are a legal tool these days, Microsoft doesn't want to deal with it, the insurance and validation is handled by Verisign/Symantec it's a business decision.

Bluecoat is hardly an "interception" technology it's a mid 90's enterprise grade proxy and internet policy management box that can do SSL interception their early boxes used SSL strip the newer ones probably still do. They don't have a magic backdoor to break SSL all you can do with a Bluecoat box is to install your own enterprise certificate and make it act as an SSL proxy to ensure that your employees do not surf pronhub over SSL at work.

So as far as tinfoil hat rants goes i give this one 3/10 it's not even that creative, you might want to look the "PRISM" partners slides again might give you some inspiration.

Upvoted for the timely Olympic scoring.

Isn't Microsoft's CA used only to sign their software?