It’s common for folks on Fediverse to tell people to use a browser fork that doesn’t do engine development or to turn off any functionality that opens a connection to somewhere other than the site you are browsing (e.g. to get a list of compromised certs).

It would be interesting to see an analysis of how quickly such Fedi-recommended browsers or configs protected users from the intermediates with bad keys.