A corporate network (or any other end user) should have no trouble enabling some sort of explicit override option. Having the ability to override certs is fine; the problem is that it's default behavior.

Dell would (hopefully) be a lot more reluctant to ship one of these certs and show specific intentions by changing settings to allow this kind of override.