Why do even security-linked vendors not use application allow-listing?

DigiCert is not a tiny company, with well over 1000 employees. The company is not in bad shape financially, as by its own account, "DigiCert...announced a record-breaking Q4 for FY2025." (Link). As a public certificate authority, many of its long-lasting certificates ship on consumer devices by defa