"Unless someone can compromise 12 - or however many - independent people worldwide simultaneously, grab their HSM, torture them all for their signing info and private keys and passcodes, and sign off something fake without ANYONE noticing..."
NEVER underestimate the power of a state-level actor with a bottomless wallet. Consider the data center in Utah...
Biting the hand that feeds IT
