Another thought I had was regarding interception. Anyone with access to root cert can decrypt the data. My understanding was that these certs were supposed to be counter signing right?
Otherwise, wouldnt any government implementing this just be conducting zero effort surveillance?