"3) Force OEMs that wish to compromise Chrome to write explicit Malware that will be much harder to handwave away and thus be a bigger risk to their reputation.

"3) Force OEMs that wish to compromise Chrome to write explicit Malware that will be much harder to handwave away and thus be a bigger risk to their reputation." THIS. Shame on you, Google, for allowing anyone to defeat the certificate pinning you advocated for in the first place!