almost certainly means their package managers won’t download dependencies over https using those certs.

in fact, there’s a link right there in the article with a list, and sure enough it’s package managers like pip as well as libraries like rustls-webpki: https://ifin.network/t/emudhra-intermediate-certificates-compromised/909