How does &quot;Chrome does not perform pin validation&quot; translate to &quot;This is not what pinning defends against&quot;?<p>The fact that Chrome ships with a broken implementation does not imply the concept is broken.