Or the one that is hierarchical in theory but provides no accreditation in practice an uses a completely insecure protocol? Or the protocol replacement for that technology that replaces the hierarchical nature and replaces it with cantralized entities that again get full authority to answer any request how they want?

Plus from the article:

> It involves compromising email accounts and websites tied to police departments and government agencies

If websites and emails can be compromized then the hackers also have a good chance of gettng at certificates.

But the root problem isn't even that hackers can claim to be the police when making the requests but rather that the police can make these requests in the first place without getting a court order. "Police" is already a very large group of externally unaccountable actors that will include those willing to abuse these powers without the need for "hackers".