Unauthorized root certificate

There’s a root certificate listed in my phone settings that is completely greyed out (I have not installed any profiles and no profiles are shown in my settings).

My phone is not a business, org, or edu device, it’s always been personal and I’m the original user.

Above the root certificate it says full access is enabled and the toggle is set to on and I can’t turn it off or delete it. I know nothing about these things except that they’re typically used for work/school and can also be the result of visiting a malicious website or a bogus QR code.

I’ve repeatedly contacted apple support for help and they tell me they don’t know what root certificates are and they can’t explain them, nor can they tell what’s on my phone and just direct me to the basic support/about page for root certs. They will only run basic remote diagnostics on my phone and always say the phone is working perfectly.

My cellular carrier denies any knowledge of it and won’t take responsibility for it either.

I’ve had my ESIM deleted on me multiple times. It’s been changed to a travel line, my phone number turned into an intl number for and I couldn’t make any calls because it was adding an intl prefix to my line. I’ve had multiple instances where I’ve called someone and it not been the right person on the other end and currently there are multiple websites I just can’t access because I’m being blocked for some reason (ex. my cell carrier help forums won’t let me in). There have been numerous issues with website help forms being greyed out including password fields. The phone is really screwed up.

My biggest suspicion is my ex jailbroke my phone because he already hacked my iCloud and doxxed me. I’ve reformatted my phone 7 times now and the root cert won’t go away or allow me to delete/turn it off and there is no evidence of a profile but the root certificate section says there’s an “Xfinity mobile” profile with control.