From what I understand the "stable-updates suite" is not part of the normal Debian stable distribution. I also don't see the update with an "apt update; apt upgrade".
Is the plan to keep it that way? In effect this means all "normal" stable users who don't do anything extra will still have a broken setup in 2 weeks, because they relied on an automation technology that they hoped would solve their cert problems. I don't think this is an acceptable solution TBH.
