2 ms·

Good point - given a sane set of trusted CAs (sic!), the need for a trusted last hop mostly goes away.