The point is not "this time there's no risk", the point is basic PKI safety means you need to be able to handle certificate revocation immediately. If you can't handle it today when there's "no risk", you also can't handle it when it's actually compromised.
Algeus, are not doing the right thing: the right thing overall would be them running their services correctly, and being able to do basic service maintenance correctly, like having a fast turn around for revocation. If they did not want to be subject to basic requirements of using publicly trusted certificates, they should have been running their own root that does not impact the security of PKI for everyone else.
Using a lawsuit to avoid their responsibility simply means next time this happens they'll do the same thing.
Algeus, are not doing the right thing: the right thing overall would be them running their services correctly, and being able to do basic service maintenance correctly, like having a fast turn around for revocation. If they did not want to be subject to basic requirements of using publicly trusted certificates, they should have been running their own root that does not impact the security of PKI for everyone else.
Using a lawsuit to avoid their responsibility simply means next time this happens they'll do the same thing.