I understand this, but that wasn’t my question. And the only comment in all this typing under my original comment that even made an attempt to answer my question of whether or not a piece of software can install a root CA without my knowledge, well, that got downvoted, too.
To reply to your question. It's possible to install a CA without one's knowledge.
The battle update this week requested to run with admin rights, like a million of setup software. It didn't ask specifically "Allow setup.exe to install a system CA? Yes/No".