The trust process used for the CA roots is fascinating. There's huge trust involved in selecting a CA, and there's a strong desire to use fair selection methods, but browsers act like external auditors, using policy and incident tracking to track behaviors.