One of the most relevant problems in Germany is that there is a caste that entirely specializes in written warnings and cease-and-desist declarations. A lot of our parliament consists of lawyers that tend to make favorable laws for their own industry. Just as background information on how Germany tends to enforce laws through private enterprise.

Really good behavior from the browser vendors. Either the TLS chain is working or it is not. There is little nuance in the chain of trust.

Since encryption seems to be the enemy dejure of governments, I would expect the next step would allow decryption by state executive forces if such "certificates" were established. This seems like getting a foot in the door.

But I still wonder how it would enforce compliance. Certificates can be added and removed from browsers. Some use the OS certificate store and some have their own. I hope the community keeps a watchful eye. Because a mandated certificate is the opposite of secure.