Hacker News Reader

How could company filters trigger on phrases within a webpage if TLS is used? Would they have to bug the browser itself somehow instead?

Many companies use proxies that do SSL interception.

Exactly, this is how they do stuff like detecting data exfiltration (though that can also be done by traffic flow analysis also).

Install a private CA and just decrypt TLS.