That's why they take incidents like this seriously and stop issuance until it's fixed. They could get kicked out of trusted roots otherwise.