Comment by yjftsjthsd-h

Any app capable of installing a TLS CA is capable of writing to known_hosts (or authorized_keys, while we're at it).