Remember, were talking a Lenovo-owned company. They need to figure some way to wiretap all the secure connections so they can hijack them and rebroadcast them in the clear. This new service will be to serve ads so you can shop new, exciting places, and not at all so they can milk a few more dollars out of it.
And they'll claim they didn't know that installing a toxic root certificate on your device would compromise your security at all.