Not a security expert, but this is a huge code smell.

Always be cautious of trusting certs of any kind, especially test/dev certs with top level privileges lol personally i would avoid.

Based on the issue there are too many weak points and the "response" given didnt seem to care about the vulnerabilities or user concerns, only said why its needed...

The issue poster was smart in running in a sandbox and comparing files.