There is literally nothing about enterprise inspecting proxies that requires the client operate without default and always on crypto. That makes no sense at all.

The way businesses handle this is by installing a certificate they manage and deploy to their proxies.