> Although one problem with this is that they issue backup certificates from other CAs so it'd easily trigger warning fatigue!

Indeed, the fact that Cloudflare emails out CT warnings due to their own backup certs is rather embarrassing.