the author made a guess in the next paragraph: When it comes to SSL certificates this change entirely makes sense, however for file trust this is problemat

the author made a guess in the next paragraph: When it comes to SSL certificates this change entirely makes sense, however for file trust this is problematic, as previously signed files can’t simply have the certificate updated on them in the same way websites can. This is likely why Microsoft trusted this root certificate for much longer in Microsoft Windows than browser vendors did. But until we hear from Microsoft, I guess we won't know for sure.