Why did they choose to make variable certification optional?

Yes, this is exactly what I meant.
Just like Ethereum merkle-izes it’s complete state, a subnet could do the same. I understand, that this is very much differs from how it is implemented now, but this could give the IC outstanding performance for such complex scenarios with integrations between canisters.