For intellectual curiosity (and illusion of security maybe):
How to disable *ALL* of android system "trusted credentials"/certificates? instead of clik/scroll/clik/clik on each item of a list of 2/300+? It looks like it has been designed so you wouldn't do that...
Also what happens when you do it? You just need to re-enable them one by one if/when you need them?
(Also prompts questions about all that #firefox trusts by default: many governments, many chambers of commerce, random corps etc.)