> Largely, you probably should not either if you are trusting the AV client with the rest of your computer. Yes, it can be fucked up and break TLS, but there are a thousand other ways a privileged executable like an AV program could fuck up a lot more of your system.

You're right that antivirus software is more or less a sieve of a shield, but this doesn't really make sense.

If AV exploits are worth fixing, then so are the exploits made available by AV certificate handling.