The purpose of WebPKI-Roots is to hardcode a static set of PKI
certificates into compiled code.
This functionality is unfit for a Debian stable release, where the
ability to update certificates is crucial for the long lifespan of the
release.
Hence flagging this as a severe bug, to avoid this package to trickle
into testing and from there into stable.