Seems Chrome is specifically making an exception for custom root CAs though: > This will only apply to TLS server certificates from CAs that are trusted in a d

Seems Chrome is specifically making an exception for custom root CAs though: > This will only apply to TLS server certificates from CAs that are trusted in a default installation of Google Chrome, commonly known as “publicly trusted CAs”, and will not apply to locally-operated CAs that have been manually configured.