This fundamental situation isn't particularly different from the existing dependences on purchased digital certificates and the lists of trusted vendors that are embedded in PKE-based tools including many browsers.