It seems that most Firefox users are correctly picking up this week's certificate revocations but a random minority subset are not (or else the rest we're using is busted on some machines), and there is no obvious pattern. "Signing in" or not signing in does not cause the outcome https://transfem.social/notes/askh4urwno0r1dvo

EDIT: Actually one pattern: ALL affected installs reported to me so far have been on mobile phones