The business model an practices of the company are completely irrelevant to the people concerned in this case though - the users of the web browser. They never

The business model an practices of the company are completely irrelevant to the people concerned in this case though - the users of the web browser. They never signed up for shit, and they have no incentive to trust a business which refuses to invoke compromised certs because people are unwilling to pay. Yes, this doesn't make them untrustworthy as a business, since their business model was known - it does make them untrustworthy as a party which is meant to be securing the web though - because they'll be failing at it spectacularly. Again: I never signed up to shit, and their business model means shit to me too - I just want some degree of security when browsing.