> there are lots of things that download stuff automatically from DISA So, programs are downloading certs automatically, where they would be even less likely t

> there are lots of things that download stuff automatically from DISA So, programs are downloading certs automatically, where they would be even less likely to properly check checksums against a secure site. And create a additional small attack vector.