3 ms·

There's nothing wrong with chain of trust. There's everything wrong with the end user not being allowed to choose which chain of trust to allow.