I like the idea of the local feed, especially for smaller, less generalized instances, but the default should definitely be federated and the wording could also be changed if only because the word “federated” would probably be confusing to non-technical people. Replacing it with something like “All” might be a better idea

Piggybacking off this comment because I completely agree with it.

Did we not learn anything from CrowdStrike? If a comparatively simple fix was able to wipe out half the world, how would something that requires an active choice (where to get certs from) not completely cripple all of our infrastructure?