As long as they deploy custom CAs to every machine they own, nothing wrong with that: there are legal requirements to log or filter stuff on company computers.

Solution is simple- don’t use business machines for personal stuff[0] and there will be nothing to intercept.

[0] this is usually already mentioned in company computer use policy anyway.