Most OS provide a mechanism to manage SSL certificates and a OS provided SSL library, sure not every application uses that but then how is a new standard going

Most OS provide a mechanism to manage SSL certificates and a OS provided SSL library, sure not every application uses that but then how is a new standard going to fix that? The only thing providing it in the kernel would do would do is decrease performance and require kernel updates to fix SSL vulnerabilities.