Thanks for raising this point! Honestly, I'm not sure. Probably not. Given that localdots is meant to be used only for local development, would this be considered an important feature anyway? I'm not sure I see the security concerns here.
This way the only possible certificates that can ever exist are those created during setup. After that nobody can sign more certificates because the private key needed doesn't exist any more, so you don't need to worry about constraints (which can have compatibility problems e.g. that's why Let's Encrypt X3 and X4 exist instead of X1 and X2 these days)