Kazakhstan recently tried to force users again to install a root CA. This has been rejected again by numerous western tech companies.

<https://www.engadget.com/tech-giants-browsers-block-kazakhstan-web-surveillance-080031499.html>

How they do it might be questionable. But consider they would have gone the official way to put up a root CA and get it into OS or browser root CA stores. Or instead the US would force users to install a root CA. Lots of countries already own a CA. Would this be any different regarding capabilities to snoop and modify traffic?