Everyone? They all have people that they trust, and at least one of those people is tech-savvy enough to evaluate root certificates?