I really want Europe to succeed but I keep thinking the tpm/trust zone keys are going to be a killer here. We need something akin to DNSSEC key ceremonies, combined with the CAB forum to police who gets admission.

by "meet specific security requirements" they mean "paid us to vouch for them". You don't get blocked if you don't install security updates