The thing which is disturbing about this one beyond the obvious that it resulted in a full compromise of HTTPS trust in iOS, OS X, and AppleTV is the shallow nature of the bug. When it comes to shallow bugs this must go down as one of the shallowest and long lived; at least for iOS.