My personal conspiracy theory is that root CAs have long been compromised somehow, but the government(s) that holds the keys can’t risk letting that secret out as evidence in any court case so they must keep the knowledge secret until something bad enough happens that they could risk letting it be known.