CAs is the problem. Not who runs them...