>As are subject to various checks and balances, including third-party qualified audits through WebTrust or ETSI and strict criteria set forth by leading browser

>As are subject to various checks and balances, including third-party qualified audits through WebTrust or ETSI and strict criteria set forth by leading browsers, before they are accepted in browser root stores. yes. And in cases like DigiNotar and other less famous CA (and intermediate) compromises, we've seen how well that works.