Ooh I like that in principle and, on paper, would be also a good opportunity to further decentralize the power root CAs have today.

Also would be quite complex for regular users to even grasp and then to choose their trust provider. Cynical me thinks this would just end up giving more power to the device manufacturers and centralize on handful of better known 'trust providers'. No non-techie person I know has heard of Verisign but everyone knows Meta.