Facebook has actually done this before with their Onavo VPN that intercepted all your web traffic in exchange for something like a $5 gift card every month. Distributed publicly using their internal enterprise certificate and got their cert revoked.