Yup, very secure. Then every single IT department installs a cert on the machines to MITM everything.