NordVPN Threat Protection does SSL MitM network side of all port 443 traffic (twitter.com)

According to the twitter thread, the certificate is generated and used locally on your computer, not remotely on the NordVPN servers. If this is confirmed it doesn't sound too bad, but if the NordVPN software is closed source it's still suspicious.

Aha? And how’s this feature supposed to work without doing that?

Don't use NordVPN

https://www.privacyguides.org/tools/#vpn-providers

but if you read the whole thread it turns out that's not really an issue as it's scanning just like any AV