It makes sense that the more CA's you allow into the market the less of a "total ripoff" you'd have due to competition, but intuitively there would be more of a

It makes sense that the more CA's you allow into the market the less of a "total ripoff" you'd have due to competition, but intuitively there would be more of a problem on the "insecure" side due to fly-by-night companies with weak security. I don't see this as the main problem though. In practice I feel like the whole CA system is flawed because you're trusting the CA based on the authority assigned to it by a higher governing body, a governing body you can't necessarily be sure isn't getting some blank-check signing superpowers from the CA and doing man-in-the-middle attacks on persons of interest with bogus certs. I can't necessarily trust that the authorities have my best interests in mind so I can't trust the CA signing system. I look forward to the author's proposed solution(s) to this problem.