To be honest, this is a case of technology making humans work for it, instead of the other way around. By the design itself of TOFU, most users will trust the f

To be honest, this is a case of technology making humans work for it, instead of the other way around. By the design itself of TOFU, most users will trust the fingerprint because it looks like a weird string of random stuff and just pressing "Y" removes the question out of the way. If verifying the fingerprint is such a key aspect of TOFU, then the dialog should be an input instead of an output. "Input here the expected fingerprint" in order to allow connecting. You'd have received it by some other means, and would type or copy-paste it into the terminal to finish the verification process. Et voila, safe TOFU completed!