We shouldn't allow to inch towards this kind of situation if for nothing else than for not sliding the Overton window in the wrong direction.

It's either a neutral organization signing certs which you then have to accept by default, or you get fined. Those are the only acceptable scenarios.