> if we're involving a trusted external source, why not just use that source to track the token rather than involve a blockchain?

How would this work?