It must be performing a man-in-the-middle for HTTPS requests. That makes it more difficult to do things like certificate pinning.