I'm on Ubuntu 16.04 LTS. I recently had to install something that has Mono as a dependency, and imagine my surprise and consternation when said Mono installati

I'm on Ubuntu 16.04 LTS. I recently had to install something that has Mono as a dependency, and imagine my surprise and consternation when said Mono installation, from the 16.0 repositories, sucked down 160+ certificates into its own store, including the now long-disredited WoSign root certificates. One reason I stay away from installing very many apps on my phone, is that I have little confidence in how security is, or isn't, being handled on a case-by-case basis. And the size of the organization behind the app gives little indication of what to expect. Whether pointy-haired-boss management or outsourcing, their apps are often equally or worse crap WRT security. I guess now I'll have to read this article more thoroughly, and ponder how whether/how my turning to the browser instead of apps is a problem of itself.