This is what mjg is arguing here: <a href="https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=11163741" rel="nofollow">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=11163741</a><p>We need both integrity protection for firmware <i>and</i> user control of the signing keys.