Thanks all!
I’ve opened a GitHub issue here: `ssl.create_default_context()`: add `VERIFY_X509_STRICT` and `VERIFY_X509_PARTIAL_CHAIN` to the default `verify_flags` · Issue #107361 · python/cpython · GitHub
I’ll let that sit for a bit, and then open a corresponding PR.