I wouldn't call that a superficial difference. Sending a malicious public key from a central server is easier than injecting a public key into a network stream.

I wouldn't call that a superficial difference. Sending a malicious public key from a central server is easier than injecting a public key into a network stream. The former requires just a single entity to be compromised. The latter requires a compromise in the network in addition to a compromise in the CA.