The weak link you present is actually one of the reasons use HAS to be public record. Making it public record also implies that there's a Cert Revocation List

The weak link you present is actually one of the reasons use HAS to be public record. Making it public record also implies that there's a Cert Revocation List check (during the submit to the central monitor(s) oracles) and also gives everyone the ability to monitor those lists FOR unauthorized use they aren't yet aware of.