If I were to put on my tinfoil cap, I'd suggest it's not introducing a new vulnerability, but more likely that the cert update is intended to keep some people using devices that are already insecure.