True, but for my use case I already generated 10 keypairs which I pin with and I have two encrypted USB drives in two separate offline storage facilities contains backups of them.
In this way I am not stuck if a CA changed their intermediate or root without notice/goes under (It’s happened before cough DigiNotar and Comodo UserTrust.
Ah well I’ll write my own Bash wrapper to handle post renewal actions with my own CSR. Would be great if the LetsEncrypt team integrated it with the renewal functionality.