Comment by jaas

Head of Let’s Encrypt here. This is a compliance issue, there is no security or validation integrity risk.