This change is a 36x increase in effort with no consideration for those who can’t renew and apply certs programmatically / through automation

Don't worry. All that old gear is at least 45 days old - so old - and isn't an apple product anyway probably. Ergo, support isn't their issue and you will have to take that up with your OEM because la-la-la-laaaaa, can't hear you. Wanna go ride bikes?