I'd also like to point out that Apple has a record of not practicing cautiously to security exposure, like _the inclusion of CNNIC root certificate despite the public exposure of security breach_.

http://apple.slashdot.org/story/15/04/09/1531237/apple-leave...