Repeating it doesn’t make it any more true. Cert providers publish their root certs, you pin those root certs, zero problems.