I guess everybody is lying when they say to patch nodejs and python's certifi in response to this issue. They should listen to you instead about how it doesn't work that way, and stay vulnerable to MITM.