I have seen some people updated the preinstalled root CAs on the phone, and I thought this is a good idea.
Now one can visit the webpage of every CAs and download the current certs, but the most comfortable way is to install a CA cert bundle, provided here :
https://curl.se/docs/caextract.html
I did the update today, everything seems working so far.