What actual risk are you worried about here? Mozilla changed their data policy, therefore the root store might do what...?