@ParadeGrotesque @joeo10 mh interesting, thanks. Not great.
I actually see this as an issue for the OS more so than a browser. With Firefox for example maintaining its own certificate store it should be doable to just remove the problematic certificates. But on android or windows with browsers that use the OS store it would become really problematic.