Not that I don't agree, but PKI relies on a trusted authority which can be compromised. If you're running a trustless system, basically any party can be compromised but the blast radius is limited to just the compromised infrastructure and money, not the entire system.