Comment by Panzerschrek

Are chain-of-trust attacks real? Is it necessary to make so much effort to avoid what supposedly never happened?