I don&#x27;t know what you mean by, &quot;permanently pinned (TOFU) bootstrap&quot;, but the fact that it &quot;validates&#x2F;executes signed application packages&quot; doesn&#x27;t sound like it protects the end user from you sending them a &quot;signed application package&quot; which contains something to steal their keys&#x2F;messages...<p>If you could post a link explaining how this tech works, I would be very interested in reading about it...