If they hadn't done that, I would have expected the browsers to do it for them sooner or later by distrusting their root certs.