It doesn't seem like browsers are willing to revoke certificates from these dangerous CAs, but what about a compromise that flags some certificates as less trus

It doesn't seem like browsers are willing to revoke certificates from these dangerous CAs, but what about a compromise that flags some certificates as less trustworthy?--a certificate tier, if you will. I'm envisioning a warning page in the style of Firefox's "This Connection is Untrusted" that would require the user to consent before proceeding to the page. Or removing the lock icon if that's too intrusive. It wouldn't break websites but it would bring attention to websites' choice of security and probably spur action from those affected. The whole system needs an overhaul but we also need a stopgap.