Yeah, it increases the attack surface of mitm attacks to your network from the local os level.
replyDoesn't affect app bundles though, only *nix commands. This'd be detected pretty quickly, at least by the significant portion of patched devices.
replyUnless you're clever enough to only poison user agents known to be macOS and CLI. You'd probably get by.
replyxz-tools was only caught because it had a bug causing slow startups and someone was micro-benchmarking Postgres and decided to dive in further.
One person, at that particular time. The person and the task were also a couple standard deviations away from the norm, the world was incredibly lucky.
replyThe cert is provided before the user-agent string is
reply