[trelane]

> who gets to decide the criteria for trust

Good point. Both are important: who does the trusting and how they define trust.

The latter is the second set of concerns: remote attestation.

I recall reading someone on Twitter mentioning having remote attestation for online banking. So starts the dystopia.

But yes, having a trusted chain can be a good thing. It depends entirely on the who, the what, and the how.