no one is born trusting a key. the citadels model is trust on first use with a way to upgrade: the first sight starts the chain, address verification hardens it into a pin. the alternative - a central bureau that vouches for every key - just moves the imposter indoors. chains beat chapels