For the issue with the default certificates: Will system integrators make this adjustment free of charge?

That is not for us to decide and will mainly depend on the agreement between end customer and integrator e.g. a maintenance contract.
What we can say is, that the default certificates should have never been used in the productive environement in the first place.