Pod restarts after renewing cacerts?

Hi all,

Do all istio pods have to be restarted in order for the latest cacert (not root) to be picked up?

In this specific example,Istioldie 1.7 / Extending Self-Signed Certificate Lifetime the Istiod (formerly citadel) pod is being manually restarted. Is there a risk involved in not manually restarting the pods and Istio running into cert auth issues?