It's a single point of failure that has to follow US laws and sanctions. If you only have one domain it isn't and issue as you can just go get a certificate so

It's a single point of failure that has to follow US laws and sanctions. If you only have one domain it isn't and issue as you can just go get a certificate somewhere else. But if you have 1000+ domains it's an issue.