Strict CertifcatePinning can thankfully prevent this from working [0] as intended, although on the flip-side it also introduces a significant problem for deep-packet inspection for malware/intrusion detection and privacy enthusiasts who would like to re-map certain kinds of traffic on the client-side [1].

[0] https://news.ycombinator.com/item?id=10727649

[1] https://news.ycombinator.com/item?id=19172038