They can be enabled by policy. An enterprise will usually have a policy installing it's custom ca

https://www.chromium.org/Home/chromium-security/crlsets/

See here for some of the why: https://www.imperialviolet.org/2012/02/05/crlsets.html

I vaguely remember there was similar reasoning as why golang doesn't support them, they're "antiquated and useless".

I hit that road-block a lot when trying to do mTLS in the browser, that and dropping support for the [KeyGen](https://www.w3docs.com/learn-html/html-keygen-tag.html) tag.