circumstantial evidence, but nothing that was definitive
>The CA had no substantial public certificate issuing program
So just because they don't have enough customers they should be removed? This just promotes centralization of trust.
I agree with this conclusion because the CA ecosystem is a fragile one if not governed strictly, since the risks are of the highest concern to the general use of the Internet.
CAs should be assumed guilty until proven otherwise.
That's not how things work. The role of a Certificate Authority is to act as a trusted third party. If that third party is unable or unwilling to demonstrate that they are trustworthy then naturally they can't be expected to assume that role.