Excellent study! I know it's not exactly easy to do with their analysis framework but I'd be interested to know how many apps just ignore certificate errors. It's a depressingly common "solution" on Stack Overflow..