The compromised certificates are also signed by Comodo (Sectigo) "AAA Certificate Services" root. However the website trust for this CA was removed in 2025: https://bugzilla.mozilla.org/show_bug.cgi?id=1957685
That being said, disabling Comodo_AAA_Services_root.crt might be prudent in some situations. Note however that doing so might lead to various other intermediate certificates being untrusted, too.