Trust isn't black and white. Removing the cert entirely breaks existing applications which comes with its own risk. Using TrustCor as an example there is no ha

Trust isn't black and white. Removing the cert entirely breaks existing applications which comes with its own risk. Using TrustCor as an example there is no hard evidence they have done anything wrong. Is that enough to justify cutting off their clients? What if one of those clients is a major antivirus vendor etc. with pinned certs in their software? Or road signs etc.?