A remote key-logging attack on AI assistants [pdf]

I don’t understand - how is the attacker able to decrypt TLS packets for ChatGPT requests? It seems like that aspect has been assumed.

Isn’t this similar to someone just replacing your HTML page for an encrypted connection?