So where is the redesign? This is like saying that a repository is down for two years, but it's fine, since they promised to fix that. Also, it's much worse, because Apple knows every app you run, including, e.g., Tor Browser. Do you think it's good for your privacy? Can you yourself fix that on "your" computer, which you "control"?
Apple since implemented encryption for the OCSP protocol they were using (addressing privacy concerns) and most likely improved the infrastructure to avoid similar outages. They also promised that users could opt out of certificate revocation checking, but so far they have not delivered, this much is true.
I am not at all concerned about the privacy of Apple occasionally verifying the developer certificates I use on my computer. I think they have much better things to do then log this information and try to link it back to me. I mean, if they want to know which software I run they have many more — and much better — options to collect my private data than using OCSP. In the end, this is about trust more than about anything else. A Linux software repository could also be collecting data about which packages you download. Second, OCSP is a standard protocol for certificate checking in the web. I mean, Firefox is using it. So is Firefox bad for privacy now? Besides, I think it's entirely silly to be concerned about OCSP privacy when we have things like unencrypted DNS lookup still being the normality.
Look, I fully understand that some people dislike the idea of their OS periodically checking certificates on their computer. Fortunately, there are plenty of systems on the market that can cater to different needs and expectations. You decide what is a concern for you and what not. If you are privacy-oriented to the fault, you probably want to use some secure version of Linux with IP anonymisers, manually installed software and of course everything strictly audited. Most people don't care about this stuff.
