The situation is somewhat similar to Certificate Authorities. CAs are trusted at differing degrees and also have to watch out not to get their root certificate stolen.