GPG wasn&#x27;t chosen because it&#x27;s not as secure as content trust.  Content trust provides all that GPG provides plus:<p>- Replay attack prevention<p>- Freshness guarantees (so you can&#x27;t be given older, vulnerable images)<p>- Trusted, delegated signing