> Frankly I expect the days of being able to install our own trusted certificates are numbered on the few devices that do currently allow it.

For iot security reasons, namely trying to stop persistence of exploits, secure boot features on arm processors will become widely used. Think of it like TPM chips. This will make it much harder to “own your” device.