Technically, you shouldn’t even deploy certs to network appliances or servers but they should fetch certificates automatically from a vault. I know there’s minimal support for such things right now from some vendors, but that should be fixed by those vendors.
Even Microsoft supports such solutions in Azure both with PaaS components and Windows and Linux servers (in Azure or onprem) via extensions
As European, I think we should work towards being less dependant on USA when it comes to many things not only defense.
Europe shouldn’t depend on USA to defend us. NATO shouldn’t depend on a single country