Privacy

Honestly, the chain of trust model for TLS certificates is just broken from top to bottom in practice. It's sort of along the lines of "anyone could walk past the building / into the apartment building basement and start flipping switches or fucking things up with the HVAC system" / "paper checks can be forged by anyone who cares" type of thing: It's mostly just that no one cares enough to exploit the problems with it. But yeah, for anyone who takes seriously things like CA root certificates staying secure and is bothered when they're not, they basically spend their entire time that is thinking about it being bothered by it, because right now it's all broken.