So the Low risk of compromise for most people is more important than the ability to easily maintain a system? If a certificate is going to be compromised it's m

So the Low risk of compromise for most people is more important than the ability to easily maintain a system? If a certificate is going to be compromised it's most likely going to be the most important cert to the system anyway. A hacker isn't going to go after the meaningless ones. But by your logic I should increase the maintainability of the system for no benefit. Obviously this is highly dependent on the usage of the certs to begin with.