I guess they didn't try with a "signed append-only log", they might be able to shave off even these two remaining seconds.