Very bad argument. WebPKI and the internet are the global infrastructure. For the sake of argument, what unnecessary risk do you have in mind?

He was asking, not putting forward an argument.

Trusting a CA that uses 4 as the private key is risky. If it's a small CA that issued certs that you don't need to consume, it would be an unnecessary risk to trust it.