Earlier quoted context omitted.
So you force your citizens to install a compromised SSL cert and can now impersonate any website. Now what? If you want to monitor someone don't you have to proxy all their traffic? Is that even feasible on a country wide scale? Because you can't do it intermittently since a user can just check which cert the key is signed with to tell you whether you're currently being monitored.
I would think it's not only feasible, but also more simple than what the Great Firewall already does. You could probably do it on on 0.1% of the NSA's yearly budget. (Which, after some Googling, turns out to be 10M USD. That's even more than I expected.)
10B, not 10M!