Sure, how else can I ensure that the records are distributed, replicated and simultaneously not tampered with? And timestamps with verifiable attestations? I thought of trying to use signed keys, but the key management quickly became a non-starter, so how else could I structure this without it turning into a nightmare human factors challenge?

Upvoted, because I honestly was hoping someone would challenge the blockchain part and show me a better solution. I'm not keen on that piece myself, but don't know how to design around it without raising other concerns I'd rather not deal with.