Hm ok, I guess that makes it less of a big deal, but it still sits funny with me. I guess all iOS devices are still "vulnerable" to a rogue nameConstrained CA

Hm ok, I guess that makes it less of a big deal, but it still sits funny with me. I guess all iOS devices are still "vulnerable" to a rogue nameConstrained CA then - assuming they share code with Safari?