Can the same scenario of room 641A at At&t in 2007, yield as much data in 2022? And, can "full take" of traffic imply somehow a MITM with privilege of downgrade attack or cert injection?

Is it possible in 2022, to MITM all traffic into cleartext as it was in 2007?
We are talking Nation states, explicitly having full take access to whatever the ISP is seeing.
The whole point of TLS 1.3 is that downgrade attack and mitm and decryption of the world's most popular sites CAN'T happen, right?

amp attack cert data imply injection mitm privacy privilege scenario traffic