Comment by sidewndr46

plausible deniability. If your key can be brute forced and your intermediate CA is used by some bad actor, you can just say they brute forced it.