> It does generally make sense that the OS vendor needs to play a key part in helping ensure trusted parties are involved in the supply chain.

this position of privilege is what the OS vendor (google in this case) wants, because it spells profit.

I dont trust it.

The only trust i have is community trust. Piracy works on this trust, and it has worked for very long.