Right... but that's the case here. People are installing certs that grant all entitlements, a completely valid situation for someone using the certs as intended

Right... but that's the case here. People are installing certs that grant all entitlements, a completely valid situation for someone using the certs as intended but not for someone unknowingly doing so. Apple is removing the certs whenever they can but that can't possibly cover every situation.