If it's an NSA honeypot it will still be a positive thing for 99% of use cases.

Also, why would they do this? It's smarter to compromise the existing CAs.