Comment by letstrynvm

I guess that's because they know that Chain-of-trust only gets you so far.

Eventually you're running something big with bug after bug found every month and and an attack surface that includes the local filesystem and the network. At that point the buzzwords make no difference.