If I'm right about typical usage of this function it will do the right thing more often than not, which is pretty good for a stub.
I don't think that's typical usage at all: typical usage presents a UI. It's called from elsewhere in cryptui, so it's under the control of the user how frequently this is used. You add a cert to the root store even when a UI is requested. This is clearly incorrect. --Juan