>I recognize that Russia is making this change for MitM spying

Not really, banks do this. FSB would love to spy on everyone of course, but all was working fine until the CAs started revoking the certificates recently, directly aiding the FSB. From the article:

>The banks first moved to GlobalSign in 2022. This June, GlobalSign began revoking certificates held by sanctioned Russian companies, and they moved on to HARICA, the Greek academic authority.

>A month ago, HARICA refused to revoke: its issuance is self-service and domain-validated, so its certificates identify a domain and nothing else; it was not, it argued, “the competent authority to make these legal attributions.” However, on July 27, Greece’s eIDAS supervisory body appeared to confirm the disputed certificates had been revoked and referred the case to the national financial sanctions unit.