WebPKI Observatory — Governance Risk
Chrome provided substantive oversight comments on 18% of the 223 compliance incidents in 2025, down from 68% coverage in 2019, while Mozilla dropped from 78% to 10% and Apple covered just 5%. Microsoft provided zero substantive comments in 2025 despite operating a root program with 142 unique roots. This declining oversight trend concentrates governance burden on Chrome's 115 recent substantive comments while reducing accountability for the 82% of incidents that receive no public root program engagement.