I doubt, that any government is inherently more trustworthy than any other. It just coincidentally happens, that US controls 100% of root CAs and Kazakhstan (m

I doubt, that any government is inherently more trustworthy than any other. It just coincidentally happens, that US controls 100% of root CAs and Kazakhstan (most likely) controls 0. So the later needs more audacious measures, while former can just issue a gag order to Symantec (or whoever is currently active in market). CA system is inherently vulnerable to government intervention. There is no point in considering defense against state agents in HTTPS vulnerability model. It is busted by default.