APPLE'S GIT STILL TRUSTS A PRIVATE KEY THAT WAS THE NUMBER 4
The eMudhra intermediate CAs were cracked in milliseconds and browsers blocked them within hours. Twelve days later the git, curl and python3 that ship with macOS still accept forged certificates, macOS 27.2 did not fix it, and the hand workaround gets reverted by the next update.