It also leads to a ton of clients who freak out when their app suddenly goes offline because they forgot to update the pinned cert. Seen that one countless time

It also leads to a ton of clients who freak out when their app suddenly goes offline because they forgot to update the pinned cert. Seen that one countless times. Pinning has uses, but if I'm running an app, I'm not doing pinning unless I have to. Pinning to the issuing or root is much safer from an availability standpoint.