Who wants a blogpost about what a root of trust actually is and why almost all existing implementations don't actually provide that trust