At least in Linux distributions it's up to the distro, not the browser. Not to say you can add your own root certificates you trust if you don't trust your dist

At least in Linux distributions it's up to the distro, not the browser. Not to say you can add your own root certificates you trust if you don't trust your distro. You have to trust someone eventually, that's for sure, nothing can be done here.