Yeah, definitely: having lots of separately distributed and likely rarely and unreliably updated trust roots would not inspire a lot of confidence.
In turn the centralized OS authority needs proper maintenance otherwise it's just as bad if not worse, because of the larger blast radius
loading story #50274837
Remember this is the same company that demands they're the only ones who can possibly decide what software their users get to install.
So many Java trust stores never seeing this update.