If you think people are getting worked up because of fantasies then it's clear that you don't understand how big a deal this is. Even if no bad actors figured out that the entire SSL trust system was trivial to compromise during the year that these certs were valid.. it's going to be years before all client systems on the internet have their OS certificate trusts updated.

Sure browsers are safe, but countless other internet softwares aren't (curl, python, pip just to name a few I know off the top of my head). Pip has a big problem because even if the OS distrusts the eMudhra certs, it still does because it has its own trust store. This will be an attack vector (that now everyone knows about) for a while.