PKI works on trust. When a CA does things that violate that trust, their root gets removed. That's how it's supposed to work.