I've been involved in conversations with ISPs in different countries who are required by law to intercept their customers traffic. On one particular occasion I remember being told by an ISP in Germany that they wouldn't buy from us unless we developed a feature that allowed them to snoop on their users. It's called 'lawful interception'.

We developed this feature and sold them equipment. Am I a bad person? Where do you draw the line?

ISPs all over the world are looking at their users' traffic. Some of them are doing it nefariously while others are being required by law to do so against their will. It's shouldn't be the job of a vendor to determine right from wrong.

Before you go condemning networking vendors think about weapons manufacturers. American companies routinely sell guns to countries that use them against their own citizens. And nothing comes of it.