The ECB chains to a Sectigo root missing from Debian bookworm's CA bundle, so ship it with the app. Each source also converts right after it syncs, and one failing currency no longer blocks the others.