These are intermediate roots, signed by trusted root certs, so the trust from your OS or browser is implicit to the roots it trusts.

Yes, but there was no TLS cert issued that had these intermediate certs in its chain of trust at all anywhere. So why are they a CA if they don't issue any certs?