It's unfortunately, but also expected. Self interest and all that. CAs' only true marketable asset is trust. Personally, iff the CA system is something we're

It's unfortunately, but also expected. Self interest and all that. CAs' only true marketable asset is trust. Personally, iff the CA system is something we're going to stick with, there should be substantial legal penalties for failure-to-disclose timely updates on breaches by CAs. Imagine, something that a multi-national trade agreement could actually do that would be beneficial to everyone!