Apple, Google, Microsoft, and Mozilla Ban Kazakhstan's MitM HTTPS Certificate

You need to manually install a new root certificate on your OS (or I guess a malware / virus could install it as well).

What do you mean by ‘this standard’?

And we know they are not doing it because if they were, we’d all be forced to install certificate profiles on our devices like the people in TFA here...