Comment by joaohaas

Anyone in the connection chain can easily exploit the CA leak. Easiest example is your ISP.