This system pushes the "not human friendly" parts into the initial setup of a trusted root zone. This also establishes chain of trust security. The fact this can be used to create nationally and corporately controlled root namespaces that ship with machines seems like a survival trait even if I don't personally like it.

After that initial non-human friendly+secure part, the ideal result is that it is secure+human friendly. The reality is that this is just as vulnerable to eventual implicit centralization like DNS has been. That just means things need to be hijacked by regulatory capture instead of hacking.