I would agree with you if most users understood the concept of trust as it relates to the root certificate store. Very few do, likely less than 1%. Therefore I

I would agree with you if most users understood the concept of trust as it relates to the root certificate store. Very few do, likely less than 1%. Therefore I believe it must be Microsoft's responsibility to be the singular default trusted entity for the root certificate store shipped to retail consumers as part of Microsoft Windows. Your slippery slope argument fails because your "small step" would be immediately rejected by the vast majority of the Fortune 500, for starters. It just couldn't happen. It would be unworkable.