I’m not quite sure how you would manage it but a list of compromised NSECs could maybe be useful if a client had the ability to filter out NSECs on that list. It doesn’t tell you who you can trust but it tells you who you can’t!