Key pinning is not a panacea either, it just makes browser/OS vendors another authority to be compromised and subverted. While a healthy dose of cynicism is ap

Key pinning is not a panacea either, it just makes browser/OS vendors another authority to be compromised and subverted. While a healthy dose of cynicism is appropriate with-respect-to government control of TLDs, in the western world they are still at least nominally accountable to their constituents. Wholesale forgery is not likely to go over well with them, most importantly not with large tech companies. Targeted one-off forgeries would be easier to get away with, but they are also still perfectly doable today.