It depends on what they're used for but I agree that many companies seem to spy on their employees this way.

Commonly I only allow internal CAs for specific internal websites and not allow them to MITM just any website. On occasion this meant not being able to use the company's wifi and deal with 4g instead.