Vanadium does not block insecure Javascript and more on badssl.com

missing-root

Its a site of the Chromium Project and I am 100% sure you know it.

But why doesnt Vanadium block (or just allow blocking)

mixed content (HTTP+HTTPS mixed, here HTTP Javascript)
the "very bad site" with many problems at once
Mozilla old and intermediate configuration
certificates without timestamp

Vanadium also displays the lock emoji in the website title which may be confused with a TLS lock icon. Safari does not display that icon, but I think that is very unnecessary.