What I get is that the proxies are a really complete "not my problem" solution, that puts all the burden of setting-up the network encryption on the hands of the people with direct access to set-up and debug your network.

If this doesn't look like a real thing to you, congratulations, you are in a well run organization that doesn't have this problem.

Anyway, whether the costs of this thing are worth the gain, I have no idea.