If gpg-style web of trust became ubiquitous, it would require correspondingly less dedication.

And on the other hand, if this was actually working up to an xz style supply chain attack, the dedication would certainly not be lacking.