Correct. I Googled to ask about location of certs on disk: /etc/ssl/cert.pem
Is it possible for users to remove the eMudhra certificates themselves? I have no experience with MacOS, so I don't know if certain actions are prohibited. To be clear: I am not suggesting that normies do this! Rather, I am asking if it is possible for highly skilled users.
Yes. https://support.apple.com/en-us/149555
It's pretty trivial to do this. Before the official patches were out on other platforms I did it on a few machines.
Yes: https://support.apple.com/en-us/149555