I recognise the pain that is SSL in Android (Java) environments.
I've just recently had to go through the excruciating experience that is dealing with certificates, incomplete chains, closed peer connections, disabled TLS and then some, to get this to work properly on Androids dating back to 3.0.
And I have to admit, I'd rather not have to deal with it again if I absolutely don't have to.
That said, I too accepted all certificates similar to the way shown in the code in this post because of simpler debugging and testing, so I recognise what they've done. But pushing that to production/live.... Nope. Nope, nope, nope.