I would even go so far as to say that shipping with root certificates undermines the security of every user by APPEARING to verify identity, when in reality you

I would even go so far as to say that shipping with root certificates undermines the security of every user by APPEARING to verify identity, when in reality you're just trusting Mozilla, Apple, Google, Microsoft, etc., and they cannot possibly verify any fraction of the CAs that are handed out daily.