Comment by Retr0id

And what happens when someone tells the hardware signer to sign the bytes of a fake image?

What happens when someone extracts the signing key?

The presence of cryptography doesn't magically make something trustworthy.