But decentralized CAs for identity verification still have the same problem, you have to trust someone. They said zero-trust, which I don't think is possible.