One explanation is that they just don't understand that. Another is that they don't give a flip about their CA business at this point because it's just a liabi

One explanation is that they just don't understand that. Another is that they don't give a flip about their CA business at this point because it's just a liability to them that they wish would just go away. If they're going to have any customer left after this it's going to be gov.nl, who seems to prefer having a pwned CA to re-rooting their whole PKI setup.