[Regnore]

> you can't actually trust the signatures for anything.

Do you bank online? Public-private key encryption work well enough to support millions (billions?) of dollars worth of transactions per day - I don't think it's as broken as you make it seem

[AnthonyMouse]

The private key of the bank's server isn't installed on every client's device just waiting for any of them to extract it.