I’d still be using Ubuntu sometimes if it weren’t for the snaps thing. They only make sense for proprietary software… but snaps still suck. I don’t like packaged software. They contain all kinds of things that can’t be updated. The app store was getting better before all that changed. Now Debian seems better, but I still prefer source based distros like Gentoo because the ingredients come with recipes.
Technically all certificates are pinned, especially with public CAs, most OS package the latest CA certs which will all go out of style within 10 years or so. You can see this by loading up any old distro or defunct version of windows.